Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-7524 1 Ibm 1 Langflow Oss 2026-05-28 9.8 Critical
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.
CVE-2026-7528 1 Ibm 1 Langflow Oss 2026-05-27 7.1 High
IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption.
CVE-2026-6542 2 Ibm, Langflow 2 Langflow Oss, Langflow 2026-05-04 6.5 Medium
IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.