Threats tagged 'ghsa-4q62-cj5w-qmfx'

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a vulnerability that allows an authenticated attacker to execute unintended code during the Agentic Assistant validation process. This occurs because the application executes model-generated Python code in the backend before user approval, which can lead to side effects such as outbound network access, file system interaction, or data exfiltration with the privileges of the backend process.