IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing key deletion leading to session invalidation.
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.
| Version | Type | Source | Base | Exp | Imp |
|---|---|---|---|---|---|
| 3.1 | Primary | cve.org | 7.8 | — | — |
| 3.1 | Primary | NVD | 7.8 | 1.8 | 5.9 |
| 3.1 | Secondary | NVD | 7.8 | 1.8 | 5.9 |
| 4.0 | Primary | cve.org | 8.4 | — | — |
| 4.0 | Secondary | ENISA EUVD | 8.4 | — | — |
| 4.0 | Secondary | NVD | 8.4 | — | — |