CVEvulnerability

CVE-2026-14499

8.8 HIGH Published 2026-07-17 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-17
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component.

Affected configurations

• langflow langflow (>= 1.0.0 < 1.10.2)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References