Threats Tagged 'cve-2026-19286'

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain a critical vulnerability (CWE-94) that allows remote attackers to execute arbitrary code via the A2A public endpoint due to improper enforcement of security restrictions. This vulnerability has a CVSS score of 9.8, indicating a high risk of compromise without requiring user interaction or privileges.

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain a critical vulnerability (CVE-2026-19286) that allows remote attackers to execute arbitrary code via improper enforcement of security restrictions on the A2A public endpoint. This code injection flaw is due to CWE-94, improper control of code generation. The vulnerability has a CVSS score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability.

Langflow, an open-source visual interface for building LLM-based applications, has multiple vulnerabilities identified under CVE-2026-18729. These vulnerabilities relate to code injection issues as indicated by CWE-94. The affected versions include all releases prior to 1.11.2. The severity of these vulnerabilities is assessed as high. There is no information about available patches or known exploits in the wild. The vendor advisory or patch status is not provided, so remediation guidance should be sought from the official vendor sources.