CVE-2026-17630

HIGH

MEDIUM Priority: 0.07 BB Relevance: 68/100

Published: 2026-08-05 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Network Low Complexity No Interaction Conf. Impact Integ. Impact

AV: Network

AC: Low

PR: Low

UI: None

S: Unchanged

C: High

I: High

A: High

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters.

CWE-184

Vendor	Product	Version
langflow	langflow	1.0.0 – 1.11.0

https://www.ibm.com/support/pages/node/7282147

Vendor Advisory

68 / 100

✓ Network accessible
✓ Low complexity
✓ No user interaction

8.8 / 10.0 v3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.76%

Raw Score 0.007570

Percentile 55.1%

Date 2026-10-29

2026-10-29

0.00757

2026-10-28

0.00757

nvd ref →