top of page
perceptive_background_267k.jpg

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.

Published:

26 May 2026 at 22:00:00

Alert date:

27 May 2026 at 19:08:13

Source:

nvd.nist.gov

Click to open the original link from this advisory

Enterprise Applications, Web Technologies

IBM Langflow OSS versions 1.0.0 through 1.9.1 contain a remote code execution vulnerability caused by improper validation of symbolic links during archive extraction. This flaw could allow attackers to execute arbitrary code on affected systems. The vulnerability affects multiple versions of the open-source software and represents a significant security risk due to the potential for remote code execution. Organizations using affected versions should prioritize patching to mitigate this high-severity vulnerability.

Technical details

Mitigation steps:

Affected products:

IBM Langflow OSS

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page