HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-97674 — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacke...

·Source: NIST NVD

Updated:

Executive Summary

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.

Analysis

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation. CVSS Score: 8.1. Published: 2026-10-07T01:16:36.247.

Indicators of Compromise (1)

CVE (1)
CVE-2026-97674
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 7, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.

Dark Reading
MEDIUMVulnerability

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an

CVE-2026-0322
The Hacker News