Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-09-16 | 1 | PoC1 |
| 2026-09-25 | 1 | Disclosure1 |
IBM Langflow OSS 1.0.0–1.10.3 sürümlerini etkileyen CVSS 8.5 HIGH seviyesinde Authenticated RCE açığı için PoC yayınlandı: https://github.com/Oscar-Collado/langflow-CVE-2026-17633-PoC
Post summary
The tweet announces a PoC for CVE-2026-17633 affecting IBM Langflow OSS versions 1.0.0–1.10.3, an authenticated RCE with CVSS 8.5, and provides a GitHub link to the PoC code.
6 new OPEN, 7 new PRO (6 + 1) CVE-2026-17633 (IBM Langflow RCE), CVE-2026-87902 (Wordpress Core Template Path Traversal), CVE-2026-42779 (Apache MINA Allowlist Bypass RCE), TA569, and more. https://community.emergingthreats.net/t/ruleset-update-summary-2026-09-25-v11298/3464
Post summary
The text summarizes a detection ruleset update listing CVEs with their technical types and affected components but provides no evidence of PoC, exploit tools, patches, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | langflow | langflow | - | - | - |