{"data":{"id":"dbac64ad-c6ca-4dce-9f20-f2f1519c9848","title":"CVE-2026-17625: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1","summary":"IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a vulnerability that allows a remote authenticated attacker (someone who has logged in to the system) to execute arbitrary commands due to improper neutralization of special elements used in OS commands (a weakness called OS command injection, where attackers can sneak malicious commands into system operations). The vulnerability affects multiple versions of this open-source AI/LLM workflow tool.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-17625","publishedAt":"2026-08-05T18:16:54.877Z","cveId":"CVE-2026-17625","cweIds":["CWE-78"],"cvssScore":"7.2","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"high","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-05T18:16:54.877Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}