{
 "id": "AIR-2026-0274",
 "slug": "cve-2026-97655-ibm-langflow-oss-security-scanner-bypass-vuln",
 "title": "CVE-2026-97655: IBM Langflow OSS Security Scanner Bypass Vulnerability",
 "summary": "IBM Langflow OSS has an incomplete blocklist in its code security scanner that can allow remote attackers to execute arbitrary code. The vulnerability is disclosed with no active exploits reported.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Langflow OSS"
 ],
 "incident_date": "2026-10-07",
 "incident_date_precision": "day",
 "first_reported": "2026-10-07",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97655",
   "publisher": "NVD",
   "title": "CVE-2026-97655: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in…",
   "published_at": "2026-10-07"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-97655",
  "rce",
  "langflow"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}