CVE-2026-78569

IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary code execution due to an incomplete denylist in the security scanner, which can be exploited by authenticated attackers. Organizations using these versions should prioritize remediation efforts to mitigate the risk of unauthorized access and potential system compromise. Immediate action is recommended for those managing sensitive data or critical applications within their environments.