CVE-2026-78569

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.11.5

CWE

CWE-78

References

https://www.ibm.com/support/pages/node/7286666

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.