CyberRota Analysis
AI-GeneratedIBM Langflow OSS versions 1.0.0 to 1.12.2 are vulnerable to remote code execution due to inadequate input validation, allowing authenticated attackers to inject arbitrary OS commands. This high-severity vulnerability poses a significant risk to systems utilizing these versions, potentially leading to unauthorized access and control. Organizations using affected versions should prioritize immediate remediation to mitigate potential exploitation.
CVE
CVE-2026-97679
Severity
HIGH
CVSS
8.8
EPSS
0.45%
Original NVD Description
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)