| CVE-2026-93680 |
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper…
|
9.8
Critical
|
Oct 29, 2026 |
| CVE-2026-104339 |
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…
|
9.8
Critical
|
Oct 29, 2026 |
| CVE-2026-107327 |
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…
|
9.9
Critical
|
Oct 29, 2026 |
| CVE-2026-107328 |
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…
|
9.9
Critical
|
Oct 29, 2026 |
| CVE-2026-107329 |
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…
|
9.9
Critical
|
Oct 29, 2026 |
| CVE-2026-110186 |
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of…
|
9.8
Critical
|
Oct 29, 2026 |
| CVE-2026-93674 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper…
|
9.8
Critical
|
Oct 7, 2026 |
| CVE-2026-104334 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of…
|
9.8
Critical
|
Oct 6, 2026 |
| CVE-2026-12944 |
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges…
|
9.6
Critical
|
Sep 14, 2026 |
| CVE-2026-79724 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper…
|
9.8
Critical
|
Sep 10, 2026 |
| CVE-2026-81204 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection…
|
9.8
Critical
|
Sep 10, 2026 |
| CVE-2026-85025 |
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and…
|
9.8
Critical
|
Sep 10, 2026 |
| CVE-2026-19295 |
IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in…
|
9.9
Critical
|
Aug 28, 2026 |
| CVE-2026-19286 |
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper…
|
9.8
Critical
|
Aug 28, 2026 |
| CVE-2026-19297 |
IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to…
|
9.1
Critical
|
Aug 13, 2026 |
| CVE-2026-12946 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the…
|
9.9
Critical
|
Jul 30, 2026 |
| CVE-2026-13435 |
IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox…
|
9.9
Critical
|
Jul 30, 2026 |
| CVE-2026-12940 |
IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment…
|
9.8
Critical
|
Jul 30, 2026 |
| CVE-2026-13446 |
IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-8476 |
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-8481 |
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-8505 |
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows…
|
9.8
Critical
|
Jul 17, 2026 |
| CVE-2026-8635 |
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-8859 |
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended…
|
9.9
Critical
|
Jul 17, 2026 |
| CVE-2026-9103 |
IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper…
|
9.8
Critical
|
Jul 17, 2026 |