{"id":"CVE-2026-93443","published":"2026-10-07T01:16:34.523","lastModified":"2026-10-08T18:28:44.900","description":"IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":["langflow"],"products":["langflow"],"references":[{"url":"https://www.ibm.com/support/pages/node/7290694","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The IBM Langflow open source software contains a code injection vulnerability that allows authenticated attackers to execute arbitrary code on the system. This flaw occurs when user-supplied input is not properly sanitized before being used in code execution contexts.","exploitability":"Exploitation requires an authenticated user account and is moderately difficult due to the need for crafting malicious input that bypasses input validation, but the vulnerability is remotely exploitable once access is gained.","blast_radius":"If exploited, this vulnerability could allow attackers to fully compromise the Langflow server, potentially leading to data breaches, unauthorized access to connected systems, or use of the compromised server as a pivot point for further attacks.","remediation":"Upgrade to langflow version 1.12.3 or later to remediate this code injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","code-injection","web"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:04:08.612Z"}}