SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-79724

CRITICAL · CVSS 9.8 EPSS 0.47%

Source: NVD + CISA KEV + EPSS · Published 2026-09-10 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

IBM Langflow OSS versions 1.0.0 to 1.11.5 are vulnerable to remote command execution due to inadequate handling of special characters in OS commands. This critical flaw (CVSS 9.8) enables attackers to execute arbitrary commands on the host system, potentially leading to complete system compromise. Organizations using affected versions should prioritize immediate remediation to mitigate the risk of exploitation.

CVE
CVE-2026-79724
Severity
CRITICAL
CVSS
9.8
EPSS
0.47%

Original NVD Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.