VulnWatch VulnWatch
← Back to dashboard
High nvd · CVE-2026-110193

CVE-2026-110193: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause

Published Oct 29, 2026 CVSS 8.8

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.

Affected AI Products

langflow agentic
Get the weekly digest. Every Monday: top AI security stories of the week. Free.