NVD HIGH: CVE-2026-17625 — IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10....

Wednesday, August 5, 2026 at 06:16 PM UTC·Source: NIST NVD

Updated: Wednesday, August 5, 2026 at 07:00 PM UTC

Executive Summary

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-17625

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 5, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Borderless.xyz and Mastercard partner on cross-border stablecoin payments

Borderless.xyz will explore how Mastercard Crypto Credential can help bring greater trust and confidence to cross-border stablecoin payments.

15m agoFinextra

MEDIUMVulnerabilityNEW

Jamie Dimon recruits bank and IT leaders to tackle AI risks

JPMorgan Chase CEO Jamie Dimon has been working to recruit banking and IT CEOs to an industry group focused on addressing the risks posed by rapid adoption of AI in corporate America, according to Reuters.

37m agoFinextra

HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-9081 — IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Serve...

IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_provider_key() function for the Ollama provider. The function accepts a user-supplied OLLAMA_BASE_URL parameter and passes it directly to requests.get() without validation, scheme/host allowlisting, or filtering of private IP ranges (loopback, RFC1918, l

CVE-2026-9081

43m agoNIST NVD