Описание
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.0.0 (включая) до 1.10.0 (включая)
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.00294
Низкий
9.9 Critical
CVSS3
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 9.9
github
около 1 месяца назад
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
EPSS
Процентиль: 21%
0.00294
Низкий
9.9 Critical
CVSS3
Дефекты
CWE-94