{
 "id": "AIR-2026-1258",
 "slug": "cve-2026-17632-arbitrary-code-execution-flaw-in-langflow-oss",
 "title": "CVE-2026-17632: Arbitrary Code Execution Flaw in Langflow OSS AST Scanning",
 "summary": "Langflow OSS versions 1.0.0 through 1.10.3 contain an arbitrary code execution vulnerability due to improper Python code validation during security checks. The issue was disclosed via vendor advisory without reports of active exploitation.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow OSS"
 ],
 "incident_date": "2026-08-05",
 "incident_date_precision": "day",
 "first_reported": "2026-08-05",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17632",
   "publisher": "NVD",
   "title": "CVE-2026-17632: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper…",
   "published_at": "2026-08-05"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-17632",
  "rce",
  "ast-scanning"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}