CVE-2026-17625 in Langflow OSS

Sumário

de MITRE • 05/08/2026

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: Ibm
• Reservar: 27/07/2026
• Divulgação: 05/08/2026
• Moderação: aceite
• Entrada: VDB-386324
• CPE: pronto
• CWE: CWE-78 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-17625
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-17625
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-17625/