Skip to content

Exploited: 178

LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

9.9

CVE-2026-107327Fix available

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.

Langflow Langflow2026-10-29 16:17 UTC1 min readRead in

Summary

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.

Remediation

Inventory every Langflow Langflow deployment, including staging.
Upgrade Langflow Langflow to 1.12.5.
Confirm the running version after the upgrade.

References

Patchhttps://www.ibm.com/support/pages/node/7293016

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Changed
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected versions

Version	Fixed in
1.0.0 – <1.12.5	1.12.5

Weakness

CWE-862

Exploit probability (EPSS)

0.7%

Timeline

2026-10-29Publicly disclosed

Sources

NVD