CVE-2026-97674 — Langflow OSS is affected by multiple vulnerabilities

CVE-2026-97674

Langflow OSS is affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.12.2

CWE

CWE-94

References

https://www.ibm.com/support/pages/node/7290694

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.