GHSA-v798-mcc6-2m3m

Suggest an improvement
Source
https://github.com/advisories/GHSA-v798-mcc6-2m3m
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-v798-mcc6-2m3m/GHSA-v798-mcc6-2m3m.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-v798-mcc6-2m3m
Aliases
Published
2026-06-30T21:31:44Z
Modified
2026-10-23T21:00:05Z
Severity
  • 9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Langflow: Code Injection Vulnerability in Code Validation Endpoint
Details

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

Database specific 
{
    "cwe_ids":  [
        "CWE-94"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-10-23T20:51:07Z",
    "nvd_published_at":  "2026-06-30T20:17:31Z",
    "severity":  "CRITICAL"
}
References

Affected packages

PyPI / langflow

Package

Name
langflow
View open source insights on deps.dev
Purl
pkg:pypi/langflow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.0
Fixed
1.10.1.rc0

Affected versions

1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.19.post1
1.0.19.post2
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.4.post1
1.2.0
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.4.0
1.4.1
1.4.2
1.4.3
1.5.0
1.5.0.post1
1.5.0.post2
1.5.1
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.6.7
1.6.8
1.6.9
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0rc0
1.8.0rc1
1.8.0rc2
1.8.0rc3
1.8.0rc4
1.8.0rc5
1.8.0rc6
1.8.0
1.8.1
1.8.2
1.8.3rc0
1.8.3
1.8.4
1.9.0
1.9.1
1.9.2
1.9.3rc0
1.9.3
1.9.4
1.9.5
1.9.6rc0
1.9.6
1.10.0rc0
1.10.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-v798-mcc6-2m3m/GHSA-v798-mcc6-2m3m.json"