PT-2026-68225 · Ibm · Langflow Oss

CVE-2026-17623

·

Published

2026-08-05

·

Updated

2026-08-06

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3
Description Remote authenticated attackers can execute arbitrary commands due to improper validation of the command field within MCP server configurations.
Recommendations Update IBM Langflow OSS to a version later than 1.10.3.

Fix

RCE

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-17623

Affected Products

Langflow Oss