HIGH

CVE-2026-17625

Langflow Langflow 2026-08-05 CVSS v3.1

CVSS

8.8

Description

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Weakness (CWE)

CWE-78 OS Command Injection

EPSS Score

0.78%

Probability of exploitation in next 30 days

54.4th percentile

References

https://www.ibm.com/support/pages/node/7282147 Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE