Vulnerability Details CVE-2026-97674
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 20.1%
CVSS Severity
CVSS v3 Score 8.1