New vulnerabilities – clearly explained

Langflow Langflow

Research and translation in progress – available shortly.

Langflow Langflow

Research and translation in progress – available shortly.

Langflow Langflow

Research and translation in progress – available shortly.

Langflow OSS: Missing authorization allows code execution via code component

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a missing authorization flaw (CWE-862). An authenticated user with a low-privilege account can bypass the administrator-only restriction on built-in code-execution components. By configuring such a component with crafted inputs, the attacker can execute arbitrary code on the server. The CVSS base score is 8.8 (high), with high impact on confidentiality, integrity and availability. Risk is highest where Langflow is internet-facing or where accounts are shared or self-registered.

IBM · Langflow OSS

IBM Langflow OSS: Code injection in Agentic Assistant allows OS command execution

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection flaw in the Agentic Assistant, which generates and validates component code for flows. A remote attacker with any low-privileged authenticated account can cause the assistant to generate or submit component code using unblocked patterns. Successful exploitation results in arbitrary operating system command execution on the server, exposing stored API keys, data and connected systems. No public proof of concept or exploitation in the wild has been found so far.

IBM · Langflow OSS

Langflow Langflow

Research and translation in progress – available shortly.

Langflow Langflow

Research and translation in progress – available shortly.

IBM Langflow OSS: Code injection via code generation enables remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection flaw (CWE-94) in how code is generated. A remote attacker can use it to execute arbitrary code on the server, with a CVSS 3.1 base score of 9.8 from IBM. The official record does not state that authentication is required, but a secondary source describes it as reachable without login, so treat every instance as exposed until verified. VulDB scores the issue lower (7.3), and the CVE record was published only recently.

IBM · Langflow OSS

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Langflow OSS: Code injection allows remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) that lets a remote attacker with a valid low-privilege account execute arbitrary code on the server. No user interaction is required. Code runs inside the Langflow process, which can expose workflow data, credentials and connected model, database or tool services. Sources list CVSS 8.8 or 9.9 depending on the scope assessment.

IBM · Langflow OSS

IBM Langflow OSS: Code injection via eval/exec allows remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) in the eval/exec code path. An authenticated remote attacker with low privileges can inject code that is executed on the server, which is rated with high impact on confidentiality, integrity and availability. No user interaction is required, but the attacker needs a valid account on the Langflow instance.

IBM · Langflow OSS

IBM Langflow OSS: Missing authorization allows remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a missing authorization flaw (CWE-862). A remote attacker with a valid, low-privileged account can execute arbitrary code on the server. The IBM record does not name the vulnerable feature. Code execution would run with the privileges of the Langflow process, which typically holds LLM API keys and flow data.

IBM · Langflow OSS

Langflow OSS: OS command injection enables remote code execution

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain an OS command injection flaw (CWE-78). An authenticated remote attacker can inject operating system commands and execute arbitrary code on the server, with full impact on confidentiality, integrity and availability. Exploitation requires a valid user account on the Langflow instance.

IBM · Langflow OSS

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Leafpad: Exported Android component allows writing notes without permission

Leafpad for Android, version 1.21, exports an activity that needs no permission. Any app installed on the same device can send text to it, and the text is saved as a new note in the app's database without user interaction. The reporter demonstrated this with a test app, and the injected notes persisted after a restart. The NVD score of 9.1 assumes a network attack, while another source rates the attack as local, so the actual exposure is still disputed.

Marcus Radisch · Leafpad

Research and translation in progress – available shortly.

BulkShare Android app: Improper export of activity allows link queue injection

BulkShare 2.1.0 for Android exports the ShareActivity component without permission protection, so any app installed on the same device can invoke it without user interaction and insert arbitrary text into the app's link queue. The injected links can later be shared by the user through the app, which allows manipulated data flow. The NVD status is Deferred and the CVSS score is not confirmed; the product name and version mapping in the CVE conflict with the upstream listings and are unverified.

Alex Gherghisan · BulkShare