Vulnerability Bulletins |
CVE-2026-97674 |
|
| Affected software | IBM |
| IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-97674 | |