← Database

CVE-2026-84889

HIGH CVSS: 8.8 Published: 2026-09-10 Modified: 2026-09-14

Description

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.

Affected Platforms

Langflow Langflow

Weakness Type

CWE-22

References