{
 "id": "AIR-2026-1363",
 "slug": "cve-2026-84889-ibm-langflow-oss-arbitrary-code-execution-via",
 "title": "CVE-2026-84889: IBM Langflow OSS arbitrary code execution via path traversal",
 "summary": "IBM Langflow OSS versions 1.0.0 through 1.10.3 are vulnerable to improper limitation of pathnames to restricted directories, allowing remote authenticated attackers to execute arbitrary code. The issue is addressed via standard advisory disclosure without active exploitation.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow OSS"
 ],
 "incident_date": "2026-09-10",
 "incident_date_precision": "day",
 "first_reported": "2026-09-10",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84889",
   "publisher": "NVD",
   "title": "CVE-2026-84889: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper…",
   "published_at": "2026-09-10"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-84889",
  "path-traversal",
  "langflow"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}