PT-2026-60873 · Ibm · Langflow Oss

CVE-2026-14499 · Publicado 2026-07-17 · Atualizado 2026-07-17

NVD

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-14499

Produtos afetados

Langflow Oss

Referências · 2

• https://ibm.com/support/pages/node/7279996 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-14499 · Nota de Segurança