CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-104334 — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute a...

·Source: NIST NVD

Updated:

Executive Summary

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

Analysis

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation. CVSS Score: 9.8. Published: 2026-10-07T01:16:34.223.

Indicators of Compromise (1)

CVE (1)
CVE-2026-104334
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 7, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Visa targets trust in business payments

Visa has introduced tools designed to bring trust and control to business payments.

Finextra
CRITICALVulnerabilityNEW

Critical PHP2Shell Vulnerabilities (CVSS 9.2): CVE-2026-109618 & CVE-2026-109619 — Patch & Hunt Immediately

[object Object]

CVE-2026-109618CVE-2026-109619
r/cybersecurity
CRITICALVulnerabilityNEW

PHP2Shell Makes PHP Inventory and Patch Ownership Urgent

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/php2shell-makes-php-inventory-and-patch-ownership-urgent" title="" class="hs-featured-image-link"> <img src="https://www.sonatype.com/hubfs/PHP2Shell.png" alt="Image with text "PHP2Shell RCE Flaws" alongside a triangle shape containing an exclamation point" class="hs-featured-image" style="width:auto !important; max-wid

CVE-2026-109618CVE-2026-109619
Sonatype (Maven/npm)