{"data":{"id":"3465629c-d750-4306-8255-1357303f8a1f","title":"CVE-2026-9196: IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic…","summary":"CVE-2026-9196 affects IBM Langflow OSS 1.0.0 through 1.10.3. An authenticated attacker can execute unintended code during Agentic Assistant validation, because the application runs model-generated Python code in the backend before user approval. The source says this may allow side effects such as outbound network access, file system interaction, or data exfiltration with the privileges of the Langflow backend process. The weakness is classified as CWE-94, Improper Control of Generation of Code ('Code Injection').","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-9196","publishedAt":"2026-08-05T19:17:48.523Z","cveId":"CVE-2026-9196","cweIds":["CWE-94"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS","Langflow Agentic Assistant"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS code execution during Agentic Assistant validation","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00527,"epssCheckedAt":"2026-11-09T12:10:44.456Z","kevDateAdded":null,"advisoryAliases":["GHSA-4q62-cj5w-qmfx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T12:10:50.748Z","patchAvailable":null,"disclosureDate":"2026-08-05T19:17:48.523Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}