← Database

CVE-2026-78571

HIGH CVSS: 8.8 Published: 2026-09-10 Modified: 2026-09-16

Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input.

Affected Platforms

Langflow Langflow

Weakness Type

CWE-94

References