https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T22:29:31.809343+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-18894 fkie_cve-2026-18894 2026-10-30T22:29:31.823535+00:00

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.

 https://db.gcve.eu/vuln/ghsa-pf68-vvvh-6f8f GHSA-pf68-vvvh-6f8f 2026-10-30T22:29:31.823617+00:00

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.