CVE-2026-110193
HIGH
MEDIUM
Priority: 0.00
BB Relevance:
68/100
Published: 2026-10-29
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| IBM | Langflow OSS | 1.0.0 |
References & Advisories (1)
vendor-advisory
patch