Langflow

Langflow

178 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-93674

  • EPSS 0.76%
  • Veröffentlicht 07.10.2026 00:00:37
  • Zuletzt bearbeitet 08.10.2026 18:29:00

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

6.5

CVE-2026-97671

  • EPSS 0.46%
  • Veröffentlicht 07.10.2026 00:00:26
  • Zuletzt bearbeitet 08.10.2026 01:25:21

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.

8.8

CVE-2026-97673

  • EPSS 0.45%
  • Veröffentlicht 07.10.2026 00:00:11
  • Zuletzt bearbeitet 08.10.2026 04:18:01

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.

8.1

CVE-2026-97674

  • EPSS 0.3%
  • Veröffentlicht 06.10.2026 23:59:56
  • Zuletzt bearbeitet 08.10.2026 13:17:23

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.

8.8

CVE-2026-97678

  • EPSS 0.42%
  • Veröffentlicht 06.10.2026 23:59:43
  • Zuletzt bearbeitet 08.10.2026 13:17:23

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation.

8.8

CVE-2026-97679

  • EPSS 0.45%
  • Veröffentlicht 06.10.2026 23:59:33
  • Zuletzt bearbeitet 08.10.2026 04:18:02

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.

8.3

CVE-2026-97680

  • EPSS 0.27%
  • Veröffentlicht 06.10.2026 23:59:21
  • Zuletzt bearbeitet 08.10.2026 04:18:02

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem.

8.8

CVE-2026-97655

  • EPSS 0.55%
  • Veröffentlicht 06.10.2026 23:59:07
  • Zuletzt bearbeitet 08.10.2026 13:17:23

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner.

8.8

CVE-2026-97676

  • EPSS 0.55%
  • Veröffentlicht 06.10.2026 23:58:57
  • Zuletzt bearbeitet 08.10.2026 04:18:01

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulting in a sandbox escape.

6.5

CVE-2026-101329

  • EPSS 0.26%
  • Veröffentlicht 06.10.2026 23:58:47
  • Zuletzt bearbeitet 08.10.2026 18:29:28

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.