{
 "id": "AIR-2026-1316",
 "slug": "cve-2026-18729-ibm-langflow-oss-code-generation-control-vuln",
 "title": "CVE-2026-18729: IBM Langflow OSS code generation control vulnerability",
 "summary": "IBM Langflow OSS has an improper control of code generation vulnerability allowing remote authenticated attackers to execute arbitrary code. The issue is addressed via vendor advisory without reports of active exploitation.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow OSS"
 ],
 "incident_date": "2026-08-28",
 "incident_date_precision": "day",
 "first_reported": "2026-08-28",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18729",
   "publisher": "NVD",
   "title": "CVE-2026-18729: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper…",
   "published_at": "2026-08-28"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-18729",
  "langflow",
  "code-execution"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}