https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:02:27.595929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339767 EUVD-2026-339767 2026-10-04T23:02:27.608056+00:00 EUVD-2026-339767 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13448 fkie_cve-2026-13448 2026-10-04T23:02:27.608120+00:00

IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ). The vulnerability stems from an incomplete denylist in the validate_public_flow_no_code_execution() function that fails to block several code-execution agent components including OpenDsStarAgent, CodeActAgentSmolagents, and CSVAgent.

 https://cve.radiocsirt.org/vuln/ghsa-gqcf-9v26-p4pr GHSA-gqcf-9v26-p4pr 2026-10-04T23:02:27.608184+00:00

IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ). The vulnerability stems from an incomplete denylist in the validate_public_flow_no_code_execution() function that fails to block several code-execution agent components including OpenDsStarAgent, CodeActAgentSmolagents, and CSVAgent.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2366 WID-SEC-W-2026-2366 — IBM Langflow Desktop: Mehrere Schwachstellen 2026-10-04T23:02:27.608222+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.