{"id":"CVE-2026-104339","published":"2026-10-29T16:17:44.403","lastModified":"2026-10-30T04:17:40.963","description":"IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7293015","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a command injection vulnerability (CWE-94) where unsanitized user input is passed to an OS command, enabling remote code execution without authentication.","exploitability":"Exploitation is straightforward for remote attackers due to the CVSS vector indicating no authentication, no user interaction, and low attack complexity.","blast_radius":"Successful exploitation would allow full system compromise including data theft, malware deployment, and lateral movement within the affected environment.","remediation":"Upgrade to IBM Langflow OSS version 1.12.4 or later, as this is the first fixed version addressing CVE-2026-104339.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","command-injection","web","no-patch-version"],"model":"garnet-coder","analyzedAt":"2026-10-30T09:13:03.837Z"}}