


Perceptive Security
SOC/SIEM Consultancy

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.
Published:
26 May 2026 at 22:00:00
Alert date:
27 May 2026 at 19:08:13
Source:
nvd.nist.gov
Enterprise Applications, Web Technologies
IBM Langflow OSS versions 1.0.0 through 1.9.1 contain a remote code execution vulnerability caused by improper validation of symbolic links during archive extraction. This flaw could allow attackers to execute arbitrary code on affected systems. The vulnerability affects multiple versions of the open-source software and represents a significant security risk due to the potential for remote code execution. Organizations using affected versions should prioritize patching to mitigate this high-severity vulnerability.
Technical details
Mitigation steps:
Affected products:
IBM Langflow OSS
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
