| Package | Affected versions | Patched versions |
|---|---|---|
| langflow | ≥ 1.0.0, < 1.13.0 | 1.13.0 |
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating system command execution on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free