CVE-2026-107327

IBM Langflow OSS

Published 29 Oct 2026 · updated 30 Oct 2026 · Undergoing Analysis

9.9 Critical · CVSS 3.1, us.ibm.com

Description

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.

References