Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:langflow_oss:1.12.8:*:*:*:*:*:*:*

part: a version: 1.12.8 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLangflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-93680 vulnerable 2026-11-03 10:16:30.492160 Langflow OSS is affected by multiple vulnerabilities
CRITICAL (9.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
Published: 2026-10-29T15:18:37.766Z
Updated: 2026-10-30T17:18:26.502Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110186 vulnerable 2026-11-03 10:16:00.926844 Langflow OSS is affected by multiple vulnerabilities
CRITICAL (9.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Published: 2026-10-29T15:15:59.506Z
Updated: 2026-10-30T17:18:27.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110193 vulnerable 2026-11-03 10:16:00.490373 Langflow OSS is affected by multiple vulnerabilities
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.
Published: 2026-10-29T15:15:34.231Z
Updated: 2026-10-30T03:56:22.119Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.