CVE-2026-104317 Langflow OSS is affected by multiple vulnerabilities
CriticalCVSS 9.8
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm langflow oss | >= 1.0.0, <= 1.12.3 | No fix listed |
| langflow | >= 1.0.0, < 1.12.4 | 1.12.4 |
References
- www.ibm.com patch vendor-advisory