← Database

CVE-2026-97679

HIGH CVSS: 8.8 Published: 2026-10-07 Modified: 2026-10-07

Description

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.

Affected Platforms

Unknown

Weakness Type

CWE-94

References