type: cve · created: 2026-11-03 · updated: 2026-11-03 · tags: [cve] · confidence: medium · severity: medium · affected_sectors: [global] · au_impact: false
A further high-severity issue (CVE-2026-110193, 8.8) lets a low-privileged account make the Agentic Assistant generate or submit component code that runs operating-system commands, and CVE-2026-110192 (6.5) exposes insufficiently protected credentials.
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-110192 |
| CVSS | 6.5 (MEDIUM) |
| Vendor / product | langflow |
| Reported | 2026-11-03 |