CVE ID :CVE-2026-119978 Published : Oct. 30, 2026, 5:28 p.m. | 32 minutes ago Description :Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-119978 - Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore

VERWANDTEARTIKEL

CVE-2026-119979 - LM Studio before 0.4.22+1 Path Traversal via Model Downloader

CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

CVE-2026-118697 - JetBrains Toolbox and IntelliJ IDEA Improper Certificate Validation Vulnerability

CVE-2026-118696 - JetBrains IDEs Embedded Browser Certificate Validation Vulnerability

CVE-2026-61804 - myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management

CVE-2026-61826 - Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery