CVE Catalog
CVE-2026-19286
CriticalCVSS 9.8Summary
IBM Langflow OSS versions 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint.
Risk Assessment
The risk involves potential remote code execution, which could lead to system compromise and data security breaches.
Recommendation
It is recommended to immediately update IBM Langflow OSS to a version that includes a fix for this vulnerability.
Original NVD description (English source)
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint.