Filtered by vendor Langflow
Subscribe
Total
217 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-93678 | 1 Langflow | 1 Langflow | 2026-10-09 | N/A | 7.6 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. | |||||
| CVE-2026-93448 | 1 Langflow | 1 Langflow | 2026-10-09 | N/A | 6.5 MEDIUM |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | |||||
| CVE-2026-101329 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 6.5 MEDIUM |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control. | |||||
| CVE-2026-93674 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 9.8 CRITICAL |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. | |||||
| CVE-2026-93443 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 7.5 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code. | |||||
| CVE-2026-104334 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 9.8 CRITICAL |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation. | |||||
| CVE-2026-93675 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion. | |||||
| CVE-2026-93449 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.5 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation. | |||||
| CVE-2026-93447 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 7.5 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process. | |||||
| CVE-2026-93445 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.1 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. | |||||
| CVE-2026-88962 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation. | |||||
| CVE-2026-103360 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.1 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | |||||
| CVE-2026-101331 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 7.7 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials. | |||||
| CVE-2026-93677 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 7.7 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor. | |||||
| CVE-2025-3248 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 9.8 CRITICAL |
| Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. | |||||
| CVE-2026-97678 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation. | |||||
| CVE-2026-97674 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.1 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation. | |||||
| CVE-2026-97655 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner. | |||||
| CVE-2026-97680 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.3 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem. | |||||
| CVE-2026-97679 | 1 Langflow | 1 Langflow | 2026-10-08 | N/A | 8.8 HIGH |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation. | |||||