World Wires · story 88980 · official · 1 source(s)

CVE-2026-104339: OS Command Injection in IBM Langflow OSS

IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to remote code execution through improper neutralization of OS command elements.

Coverage

CVE-2026-93680: Critical Authentication Bypass in IBM Langflow NVD: critical CVEs · tier A · clear net · 2026-10-29 16:20 UTC
CVE-2026-110186: Code Generation Vulnerability in IBM Langflow NVD: critical CVEs · tier A · clear net · 2026-10-29 16:17 UTC
CVE-2026-107329: RCE Vulnerability in IBM Langflow OSS NVD: critical CVEs · tier A · clear net · 2026-10-29 16:17 UTC
CVE-2026-107328: Code Execution Flaw in IBM Langflow OSS NVD: critical CVEs · tier A · clear net · 2026-10-29 16:17 UTC
CVE-2026-107327: Authorization Flaw in IBM Langflow OSS NVD: critical CVEs · tier A · clear net · 2026-10-29 16:17 UTC
CVE-2026-104339: OS Command Injection in IBM Langflow OSS NVD: critical CVEs · tier A · clear net · 2026-10-29 16:17 UTC