Vulnerability Details CVE-2026-97679
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 36.1%
CVSS Severity
CVSS v3 Score 8.8