Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-7803 EUVD-2026-40383GHSA-qrxw-fw7h-wjxj

Flow Validation Bypass via Empty Component Type Field

Published Jun 30, 2026 · Updated Jul 1, 2026 · Assigned by ibm

Vendor: IBM Product: Langflow OSS

Description

IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields.

Affected products

VendorProductAffectedFixed
IBM Langflow OSS 1.0.0 – ≤ 1.10.0 —

References