Skip to content
Threat Feed
Subscribe

Product

Langflow OSS

2 briefs RSS
high advisory

Multiple Vulnerabilities in Langflow OSS

Langflow OSS contains multiple security flaws that could allow unauthenticated attackers to bypass security controls, exfiltrate sensitive data, and perform unauthorized data manipulation.

Langflow OSS
1t
critical advisory

IBM Langflow OSS Code Injection Vulnerability in ToolGuard (CVE-2026-9135)

An authenticated attacker can exploit CVE-2026-9135, a code injection vulnerability in IBM Langflow OSS versions 1.0.0 through 1.9.2, to bypass security controls and achieve arbitrary Python code execution on the backend through unvalidated dynamic CodeInput fields in the ToolGuard integration, potentially escalating privileges via cross-tenant flow manipulation.

Langflow OSS code-injection vulnerability rce langflow hard-coded-credentials ibm
3t 1c