CVE-2026-104339EUVD-2026-113139GHSA-8RQ9-23X9-43H7
Langflow OSS is affected by multiple vulnerabilities
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fix or patch referenced
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
IBM Langflow OSS is affected, and a remote attacker could exploit this flaw to run arbitrary commands or code on the affected system. This happens because special characters used in operating system commands are not properly neutralized.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Timeline
- CVE published
- First seen by cve.now
- Posted on X by cve.now
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- IBM Langflow OSS
From 1.0.0 · through 1.12.3