{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/langflow-oss-1.0.0---1.12.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:*","cpe:2.3:a:ibm:langflow:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-107328"},{"cvss":9.9,"id":"CVE-2026-107327"},{"cvss":9.8,"id":"CVE-2026-110186"},{"cvss":8.8,"id":"CVE-2026-101288"},{"cvss":9.8,"id":"CVE-2026-93680"},{"cvss":8.1,"id":"CVE-2026-104317"},{"cvss":8.5,"id":"CVE-2026-103092"},{"cvss":8.8,"id":"CVE-2026-104324"},{"cvss":8.8,"id":"CVE-2026-104328"},{"cvss":8.8,"id":"CVE-2026-107326"},{"cvss":8.8,"id":"CVE-2026-110196"},{"id":"CVE-2026-110244"},{"id":"CVE-2026-110193"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Langflow OSS (1.0.0 through 1.12.4)","Langflow OSS (1.0.0 through 1.12.8)","Langflow OSS (1.0.0 - 1.12.3)","Langflow OSS (1.0.0 through 1.12.3)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM Langflow OSS versions 1.0.0 through 1.12.4 allow a remote authenticated attacker to execute arbitrary code. This vulnerability is caused by improper neutralization of code in eval/exec.\u003c/p\u003e\n","date_modified":"2026-10-29T20:17:37Z","date_published":"2026-10-29T17:30:37Z","id":"https://feed.craftedsignal.io/briefs/2026-10-langflow-rce/","summary":"IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to remote code execution due to improper neutralization of code in eval/exec functions by a remote authenticated attacker.","title":"IBM Langflow OSS: Arbitrary code execution via eval/exec (CVE-2026-107328)","url":"https://feed.craftedsignal.io/briefs/2026-10-langflow-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Langflow OSS (1.0.0 - 1.12.3)","version":"https://jsonfeed.org/version/1.1"}