exploitDog

GHSA-25hm-qrp9-f25g

Опубликовано: 27 мая 2026

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.

Ссылки

EPSS

Процентиль: 53%

0.00787

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-22

Связанные уязвимости

CVE-2026-7524

CVSS3: 9.8

nvd

2 месяца назад

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.

EPSS

Процентиль: 53%

0.00787

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-22