CVE-2026-14499 in Langflow OSS

الملخص

بحسب MITRE • 17/07/2026

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Ibm
• حجز: 02/07/2026
• إفشاء: 17/07/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-379951
• CPE: جاهز
• CWE: CWE-78 (مؤكد)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-14499
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-14499
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-14499/