Langflow Oss
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:langflow_oss:1.11.5:*:*:*:*:*:*:*
part: a version: 1.11.5 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Langflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-78569 |
vulnerable | 2026-09-16 04:33:44.790306 |
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.
Published: 2026-09-10T21:43:37.361Z
Updated: 2026-09-12T15:36:04.467Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-78571 |
vulnerable | 2026-09-16 04:33:44.772291 |
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input.
Published: 2026-09-10T21:42:59.755Z
Updated: 2026-09-12T03:55:39.617Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-78575 |
vulnerable | 2026-09-16 04:33:44.693224 |
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration.
Published: 2026-09-10T21:41:54.690Z
Updated: 2026-09-12T03:55:40.701Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-79725 |
vulnerable | 2026-09-16 04:33:29.070241 |
Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation
MEDIUM (6.5)
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control.
Published: 2026-09-10T21:40:06.590Z
Updated: 2026-09-11T17:29:44.055Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-79724 |
vulnerable | 2026-09-16 04:33:29.008195 |
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
CRITICAL (9.8)
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.
Published: 2026-09-10T21:41:21.577Z
Updated: 2026-09-12T15:36:04.645Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-79742 |
vulnerable | 2026-09-16 04:33:28.999267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-79723 |
vulnerable | 2026-09-16 04:33:28.954738 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-85025 |
vulnerable | 2026-09-16 04:33:08.072577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9225 |
vulnerable | 2026-09-16 04:33:01.740142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12767 |
vulnerable | 2026-09-16 04:32:51.713315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12763 |
vulnerable | 2026-09-16 04:32:51.615372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81213 |
vulnerable | 2026-09-16 04:32:48.493839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81941 |
vulnerable | 2026-09-16 04:32:48.478183 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81265 |
vulnerable | 2026-09-16 04:32:48.465913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81268 |
vulnerable | 2026-09-16 04:32:48.259325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81940 |
vulnerable | 2026-09-16 04:32:48.255309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81204 |
vulnerable | 2026-09-16 04:32:48.223943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-81211 |
vulnerable | 2026-09-16 04:32:48.010661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76059 |
vulnerable | 2026-09-16 04:32:47.862939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.