CVE-2026-79742

IBM Langflow OSS versions 1.0.0 to 1.11.5 are vulnerable to remote code execution due to an inadequate environment variable blocklist, which could be exploited by authenticated attackers. Organizations using these versions should prioritize patching to mitigate the risk of unauthorized code execution and potential system compromise. Immediate action is recommended for users managing sensitive data or critical infrastructure.