CVE-2026-104317 in Langflow OSS

Riassunto

di MITRE • 29/10/2026

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Ibm
• Prenotare: 01/10/2026
• Divulgazione: 29/10/2026
• Moderazione: accettato
• Voce: VDB-428483
• CPE: 20261029
• CWE: CWE-502 (confermato)
• CVSS: 8.1 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-104317
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-104317
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-104317/