Threat database

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a deserialization vulnerability (CWE-502) that could allow an attacker with access to the server secret and Redis write permissions to submit malicious serialized cache values. When these values are deserialized, attacker-controlled code could execute with the privileges of the service process. This vulnerability has a high severity rating with a CVSS score of 7.5.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability classified as CWE-440 (Expected Behavior Violation) that could allow a remote attacker to execute arbitrary code via dependency confusion. This vulnerability has a high severity with a CVSS score of 8.8. No patch or remediation details are provided in the available data.

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an authorization bypass vulnerability (CWE-639) that could allow a remote authenticated attacker to access sensitive information. The flaw arises from improper authorization checks related to user-controlled keys. This vulnerability has a high severity rating with a CVSS score of 7.6.

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption during ZIP file extraction.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a critical vulnerability (CWE-94) that allows remote attackers to execute arbitrary code. This is due to improper neutralization of special elements in OS commands, enabling code injection without requiring user interaction or privileges.

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability classified as CWE-693 (Protection Mechanism Failure) that allows a remote authenticated attacker to execute arbitrary code due to improper input validation. This vulnerability has a high severity with a CVSS score of 8.8. No patch or remediation information is provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a code injection vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary operating system commands. This occurs due to improper neutralization of special elements in OS command generation. The vulnerability has a high severity rating with a CVSS score of 8.1.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability due to improper input validation that could allow a remote authenticated attacker to execute arbitrary code. This issue is classified under CWE-693, indicating a protection mechanism failure. The vulnerability has a high severity with a CVSS score of 8.8, reflecting significant potential impact on confidentiality, integrity, and availability.

CVE-2026-97679 is a high-severity vulnerability in IBM Langflow OSS versions 1.0.0 through 1.12.2. It allows a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements in OS commands, a code injection flaw related to improper input validation.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an improper access control vulnerability in the vertex result caching subsystem. This flaw allows a remote authenticated attacker to access sensitive information or inject malicious data. The vulnerability has a high severity rating with a CVSS score of 8.3.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability that allows remote attackers with limited privileges to execute arbitrary code. This is due to an incomplete blocklist in the code security scanner, which fails to properly control code generation. The vulnerability has a high severity rating with a CVSS score of 8.8.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a code injection vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary code. This occurs due to improper neutralization of special elements used in code, potentially enabling a sandbox escape. The vulnerability has a high severity with a CVSS score of 8.8. No patch or official remediation information is provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an improper access control vulnerability that allows a remote authenticated attacker to obtain sensitive information. The vulnerability does not impact integrity or availability but compromises confidentiality. It requires authentication and can be exploited remotely with low attack complexity.

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a path traversal vulnerability (CWE-22) that allows a remote authenticated attacker to access sensitive information by bypassing directory restrictions. This vulnerability has a high severity with a CVSS score of 8.1, indicating significant confidentiality and integrity impact without affecting availability.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a critical vulnerability (CWE-94) that allows remote attackers to execute arbitrary code due to improper control of code generation. This vulnerability has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and impacts confidentiality, integrity, and availability.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an improper access control vulnerability that allows a remote authenticated attacker to execute arbitrary code. This vulnerability is identified as CWE-284 and has a high severity rating with a CVSS score of 8.8. The flaw affects versions from 1.0.0 up to and including 1.12.2. No patch or remediation information is currently provided.

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction.