CVE-2026-7803

Flow Validation Bypass via Empty Component Type Field PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.0

CWE

CWE-20

References

https://www.ibm.com/support/pages/node/7278445

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.