Skip to content
OpenAdvisories
High · 8.8 CVE-2026-79742 EUVD-2026-75792GHSA-g64v-m7wp-6r42

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Published Sep 10, 2026 · Updated Sep 12, 2026 · Assigned by ibm

Vendor: IBM Product: Langflow OSS

Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist.

Affected products

VendorProductAffectedFixed
IBM Langflow OSS 1.0.0 – ≤ 1.11.5 —

Advisories 2

References