Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4358 articles · 196331 vulns · 36/41 feeds (7d)
← Back to list
8.8
CVE-2026-17632PATCHED
langflow · langflow

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Description

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning.

Affected Products

VendorProductVersions
langflowlangflow1.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
ibmlangflowcert_advisory90%

References

  • https://www.ibm.com/support/pages/node/7282646(vendor-advisory, patch)

Related News (2 articles)

Tier B
BSI Advisories17d ago
[NEU] [hoch] IBM Langflow Desktop: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB18d ago
CVE-2026-17632 | IBM Langflow OSS up to 1.10.3 AST code injection
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.ibm.com/support/pages/node/7282646
CWECWE-94
PublishedAug 5, 2026
Trending Score6
Source articles2
Independent2
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-9198EXPKEV
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Trending: 21
HIGHCVE-2026-9205
Langflow is affected by weaknesses in secret handling and sensitive configuration access
Trending: 6
HIGHCVE-2026-8478
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Trending: 6
HIGHCVE-2026-17633
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Trending: 6
HIGHCVE-2026-9201
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Trending: 6

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 5, 2026
Discovered by ZDM
Aug 5, 2026
Patch Available
Aug 6, 2026