← CVE Intelligence

CVE-2026-17624

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports.

Affected (CNA)

Vendor / productVersions
IBM / Langflow OSSaffected 1.0.0 through 1.10.3

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.