Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-81204 EUVD-2026-75784GHSA-82x2-gm4f-9fwx

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Published Sep 10, 2026 · Updated Sep 12, 2026 · Assigned by ibm

Vendor: IBM Product: Langflow OSS

Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.

Affected products

VendorProductAffectedFixed
IBM Langflow OSS 1.0.0 – ≤ 1.11.5 —

Advisories 2

References