Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4335 articles · 196401 vulns · 36/41 feeds (7d)
← Back to list
8.5
CVE-2026-17624PATCHED
langflow · langflow

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Description

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports.

Affected Products

VendorProductVersions
langflowlangflow1.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
ibmlangflowcert_advisory90%

References

  • https://www.ibm.com/support/pages/node/7282646(vendor-advisory, patch)

Related News (2 articles)

Tier B
BSI Advisories18d ago
[NEU] [hoch] IBM Langflow Desktop: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB18d ago
CVE-2026-17624 | IBM Langflow OSS up to 1.10.3 code injection
→ No new info (linked only)
CVSS 3.18.5 HIGH
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.ibm.com/support/pages/node/7282646
CWECWE-94
PublishedAug 5, 2026
Trending Score6
Source articles2
Independent2
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-9198EXPKEV
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Trending: 21
HIGHCVE-2026-9205
Langflow is affected by weaknesses in secret handling and sensitive configuration access
Trending: 6
HIGHCVE-2026-8478
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Trending: 6
HIGHCVE-2026-17632
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Trending: 6
HIGHCVE-2026-17633
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Trending: 6

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 5, 2026
Discovered by ZDM
Aug 5, 2026
Patch Available
Aug 6, 2026