Security5 dSeptember 16, 2026, 10:19

Langflow CVE-2026-12944: Scanner Blocklist Gap Leads to Root Code Execution

Langflow OSS has a critical vulnerability CVE-2026-12944 (CVSS 9.6): the component scanner blocks subprocess but misses socket and urllib, allowing an authenticated user to execute code as root. Versions 1.0.0–1.10.0 are affected; fix is 1.10.3.

DEV Community Open source

Langflow CVE-2026-12944: Scanner Blocklist Gap Leads to Root Code Execution

CVE-2026-12944: CVSS 9.6, affects Langflow OSS 1.0.0–1.10.0
Scanner blocks subprocess but misses socket and urllib
Code executes with root privileges in Langflow container
Second flaw CVE-2026-17628 (CVSS 5.4) allows password reset without old password

#Langflow#IBM

Contagious Interview Campaign Hits 30,000 Devices, Steals $10.71M in Crypto

Security

Google Releases AndroidX Libraries for Granular Android Patch Checks

Security

Surfshark: iPhone lets you delete 98% of preinstalled apps, Google only 38%

Security

Langflow CVE-2026-12944: Scanner Blocklist Gap Leads to Root Code Execution

Contagious Interview Campaign Hits 30,000 Devices, Steals $10.71M in Crypto

Google Releases AndroidX Libraries for Granular Android Patch Checks

Surfshark: iPhone lets you delete 98% of preinstalled apps, Google only 38%

Hackers extract 1.6 million images and 27,000 videos from a single Flock camera