IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection flaw (CWE-94) in how code is generated. A remote attacker can use it to execute arbitrary code on the server, with a CVSS 3.1 base score of 9.8 from IBM. The official record does not state that authentication is required, but a secondary source describes it as reachable without login, so treat every instance as exposed until verified. VulDB scores the issue lower (7.3), and the CVE record was published only recently.
IBM · Langflow OSS
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) that lets a remote attacker with a valid low-privilege account execute arbitrary code on the server. No user interaction is required. Code runs inside the Langflow process, which can expose workflow data, credentials and connected model, database or tool services. Sources list CVSS 8.8 or 9.9 depending on the scope assessment.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection flaw (CWE-94) in the eval/exec code path. An authenticated remote attacker with low privileges can inject code that is executed on the server, which is rated with high impact on confidentiality, integrity and availability. No user interaction is required, but the attacker needs a valid account on the Langflow instance.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a missing authorization flaw (CWE-862). A remote attacker with a valid, low-privileged account can execute arbitrary code on the server. The IBM record does not name the vulnerable feature. Code execution would run with the privileges of the Langflow process, which typically holds LLM API keys and flow data.
IBM · Langflow OSS
IBM Langflow OSS versions 1.0.0 through 1.12.4 contain an OS command injection flaw (CWE-78). An authenticated remote attacker can inject operating system commands and execute arbitrary code on the server, with full impact on confidentiality, integrity and availability. Exploitation requires a valid user account on the Langflow instance.
IBM · Langflow OSS
The Android app USP (package app.usp) has an exported activity that accepts content URIs from any app without checking the caller. A locally installed app without permissions can make it write attacker-supplied bytes to a path outside the intended directory in the app's private storage, overwriting existing files. The CVE describes a screenshot app named USP Ultimate Screenshot Painter, but the linked F-Droid page describes a ZX Spectrum emulator, so the product identity must be confirmed. No code execution or data disclosure is claimed.
Island versionCode 51801 exposes an activity (FeatureActionActivity) without sufficient access control. The NVD record describes an attacker-triggered freeze that causes a denial of service. The linked GitHub advisory describes a more serious effect: a locally installed app without permissions can, without user interaction, clear the frozen state of an app and launch it in the managed profile. The advisory states that the vendor has not released a fix, and the NVD severity assessment is still deferred.
Oasis Feng · Island
Research and translation in progress – available shortly.
NetGuard, a no-root firewall app for Android, has insecure permissions in its exported activity ActivityMain in version 2026080101 (versionName 2.337). An app installed on the same device without any Android permissions can send a boolean extra named "Approve" to switch the firewall off without user interaction, and the change persists across force-stop and reboot. The CVE record describes a forced device reset or denial of service, while the advisory reports the unauthorized firewall deactivation and VPN service teardown.
Marcel Bokhorst (FairCode BV) · NetGuard
Research and translation in progress – available shortly.
NoNonsense Notes for Android, version 72600 (7.2.6), exports two broadcast receivers that accept a note ID from the caller without checking who sent it. Any app installed on the same device, without any runtime permissions, can mark other notes as completed or not completed. The advisory reports write access only, with no read channel, and the reminder delete and snooze actions were not tested.
NoNonsenseApps · NoNonsense Notes
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Leafpad for Android, version 1.21, exports an activity that needs no permission. Any app installed on the same device can send text to it, and the text is saved as a new note in the app's database without user interaction. The reporter demonstrated this with a test app, and the injected notes persisted after a restart. The NVD score of 9.1 assumes a network attack, while another source rates the attack as local, so the actual exposure is still disputed.
Marcus Radisch · Leafpad
Research and translation in progress – available shortly.
BulkShare 2.1.0 for Android exports the ShareActivity component without permission protection, so any app installed on the same device can invoke it without user interaction and insert arbitrary text into the app's link queue. The injected links can later be shared by the user through the app, which allows manipulated data flow. The NVD status is Deferred and the CVSS score is not confirmed; the product name and version mapping in the CVE conflict with the upstream listings and are unverified.
Alex Gherghisan · BulkShare
YubiClip XOR version 1.0.1 (versionCode 10003) for Android contains an exported activity without permission checks. Any app installed on the same device can start this activity and overwrite the system clipboard with an attacker-chosen string. The clipboard feature is enabled by default, and no user confirmation is required.
craftxbox · YubiClip XOR
Research and translation in progress – available shortly.
Version 11.0 (versionCode 11) of the ShoppingList Android app exports an import activity without permission protection. Any app installed on the same device can send a crafted shopping list to it, which is then written to the local database and shown to the user without confirmation. The attacker cannot read existing lists or run code, and the attack requires a locally installed app.
wbpxre150 · ShoppingList
Research and translation in progress – available shortly.
Share to Clipboard for Android, version 1.14.1 (versionCode 32), exports an activity that is not protected by a permission. Any app installed on the same device can start it and silently replace the content of the system clipboard with its own text, without confirmation. The attacker cannot read the clipboard, and no code execution or privilege escalation is claimed. The risk is that a value a user pastes later, such as a password or customer data, has been replaced.
Tengu · Share to Clipboard
WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) for Android exports a headless activity without a permission or caller check. Any app installed on the same device can append text to the app's snippet store and, according to the advisory, read the stored snippets back through the app's own list screen. The CVE record describes data export by an unauthorized attacker, with no user interaction needed. The NVD score of 7.5 conflicts with the VulDB rating, and the advisory's mechanism has not been independently confirmed.
Michael Butscher · WikiAndPad alpha/beta
Research and translation in progress – available shortly.
