CVE-2026-97674

CVE-2026-97674CVE-2026-97674

Description

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.

Scoring

CVSS 8.1 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Last modified2026-10-07
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.