Threats tagged 'ghsa-4h9m-rvg4-x39r'

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a vulnerability that allows a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code with unblocked patterns. This can lead to arbitrary operating system command execution on the server.