CVE-2026-93447 — Langflow OSS is affected by multiple vulnerabilities

CVE-2026-93447

Langflow OSS is affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.12.2

CWE

CWE-502

References

https://www.ibm.com/support/pages/node/7290694

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.