HIGH

CVE-2026-17624

Langflow Langflow 2026-08-05 CVSS v3.1

CVSS

8.8

Description

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports.

Weakness (CWE)

CWE-94 Code Injection

EPSS Score

0.38%

Probability of exploitation in next 30 days

32.3th percentile

References

https://www.ibm.com/support/pages/node/7282646 Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE