CVE-2026-110193: Langflow: kod enjeksiyonu

Açıklama (NVD)

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.

Özet bilgiler

Ürün

Langflow Langflow

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,78 (yüzdelik 56)

CWE

CWE-94

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.ibm.com
• CWE-94