CVE-2026-8635: Langflow: kod enjeksiyonu

Açıklama (NVD)

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

Özet bilgiler

Ürün

Langflow Langflow

CVSS v3.1

9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,59 (yüzdelik 49)

CWE

CWE-94

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.ibm.com
• CWE-94