CVE-2026-107327EUVD-2026-113137
Langflow OSS is affected by multiple vulnerabilities
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fix or patch referenced
- Public exploit
- 1 proof of concept on GitHub
Summary
IBM Langflow OSS, an open-source tool for building AI workflows, is affected by a flaw that could let a logged-in remote attacker run arbitrary code on the system. The issue stems from missing authorization checks, which allow an attacker with valid credentials to perform actions they should not be permitted to take.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.
Timeline
- CVE published
- First seen by cve.now
- Posted on X by cve.now
Affected versions
- IBM Langflow OSS
From 1.0.0 · through 1.12.4