Loading vulnerability…
Authenticated OS Command Execution in IBM Langflow OSS
CVE-2026-97674 is a code injection vulnerability in IBM Langflow OSS versions 1.0.0 through 1.12.2. Improper neutralization of special elements used in operating-system commands, also characterized as improper control of code generation, allows a remote authenticated attacker to execute arbitrary OS commands. The affected function and precise input path are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary operating-system command execution, potentially compromising application data and the underlying host. The exact execution privileges and specific confidentiality or availability consequences are not established.
If you can’t patch tonight, do this now.
No vendor-provided workaround is identified. Interim risk reduction includes restricting network access to trusted clients and limiting authenticated access to trusted users. These restrictions do not correct the underlying vulnerability.
Patch, then assume compromise.
Upgrade IBM Langflow OSS to version 1.12.3 or later and follow the applicable IBM security bulletin instructions.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.