{"data":{"id":"d23e6069-5c0a-4eb7-95c7-a038e709efa8","title":"CVE-2026-81211: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due t","summary":"IBM Langflow OSS (open-source software) versions 1.0.0 through 1.11.5 has a security flaw where a logged-in attacker could run malicious Python code (a programming language) by exploiting weak permission checks on custom components stored in workflows. This happens because the software doesn't properly verify that users are allowed to use certain customizable tools before executing them.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81211","publishedAt":"2026-09-10T22:17:01.977Z","cveId":"CVE-2026-81211","cweIds":["CWE-862"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-10T22:17:01.977Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}