Product

Langflow OSS (1.0.0-1.11.5)

1 brief RSS

critical advisory

Remote Code Execution in IBM Langflow OSS via A2A Endpoint

IBM Langflow OSS versions 1.0.0 through 1.11.1 contain an unauthenticated remote code execution vulnerability in the A2A public endpoint.

Langflow OSS +3 remote-code-execution vulnerability webserver web-application security-scanner-bypass cve-2026-76059

4t 1c updated 14h ago