Live › vulnerability › CVE-2026-104308
IBM Langflow OSS versions 1.0.0 through 1.12.3 fail to neutralize special characters in an OS command, so a logged-in attacker can crash or disrupt the service. The sources describe the impact as denial of service only.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted Langflow OSS in the 1.0.0 to 1.12.3 range where users can log in. The sources describe only a remote attacker who already has an account, so instances without user accounts face less exposure. Hosted or managed Langflow services are the vendor's responsibility.
No product ranges from the sources yet.
langflow --version or the package listing for langflow; versions 1.0.0 through 1.12.3 are in range.1.12.3; the exact fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an OS command.
This page as .md · .json · in your agent: get_signal("CVE-2026-104308")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.