Langflow OSS (1.0.0 Through 1.12.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/langflow-oss-1.0.0-through-1.12.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 17:30:37 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM Langflow OSS: Arbitrary code execution via eval/exec (CVE-2026-107328)https://feed.craftedsignal.io/briefs/2026-10-langflow-rce/Thu, 29 Oct 2026 17:30:37 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-langflow-rce/IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to remote code execution due to improper neutralization of code in eval/exec functions by a remote authenticated attacker.<p>IBM Langflow OSS versions 1.0.0 through 1.12.4 allow a remote authenticated attacker to execute arbitrary code. This vulnerability is caused by improper neutralization of code in eval/exec.</p> criticaladvisory