AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-78569

IBM Langflow OSS: code execution

IBM

CVE-2026-78569 · Published Sep 10, 2026 · updated Sep 16, 2026

High8.8
No fix yet
IBM advisory

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.

Affected versions

PackageAffectedFixed in
Langflow OSS
Product
>= 1.0.0, <= 1.11.5No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More IBM advisories

All IBM
Critical 9.6Sep 10IBM DataStage on Cloud Pak for Data: denial of serviceCVE-2026-82100no fix yetCritical 9.6Sep 10IBM DataStage on Cloud Pak for Data: information disclosureCVE-2026-82107no fix yetHigh 8.8Sep 10IBM Langflow OSS: remote code executionCVE-2026-84889no fix yetMedium 4.3Sep 10IBM Db2: path traversalCVE-2026-86087no fix yetHigh 7.5Sep 10IBM Db2: code executionCVE-2026-86093no fix yetHigh 8.1Sep 10IBM Db2: denial of serviceCVE-2026-87958no fix yet