Skip to content
OpenAdvisories
High · 8.8 CVE-2026-81940 EUVD-2026-75771GHSA-c28j-rh28-j7f7

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Published Sep 10, 2026 · Updated Sep 12, 2026 · Assigned by ibm

Vendor: IBM Product: Langflow OSS

Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names.

Affected products

VendorProductAffectedFixed
IBM Langflow OSS 1.0.0 – ≤ 1.11.5 —

Advisories 2

References