high8.8
CVE-2026-78569
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.
Impact
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Langflow | Langflow | from 1.0.0 before 1.11.6 |