PT-2026-132212

CVE-2026-104317

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2026-104317
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com