{"id":"CVE-2026-93449","published":"2026-10-07T01:16:35.057","lastModified":"2026-10-08T18:24:54.803","description":"IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":["langflow"],"products":["langflow"],"references":[{"url":"https://www.ibm.com/support/pages/node/7290694","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows authenticated attackers to execute arbitrary code on the Langflow server through improper code generation controls, potentially leading to full system compromise.","exploitability":"Exploitation requires an authenticated user account and is moderately difficult due to the need for crafting malicious input that bypasses code generation restrictions, but the vulnerability is remotely exploitable.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary commands on the server, potentially leading to complete system takeover, data exfiltration, or lateral movement within the network.","remediation":"Upgrade to langflow version 1.12.3 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","code-injection","authenticated"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:53:57.962Z"}}