Vulnerability · Published Jun 30, 2026 · Assigned by ibm
CVE-2026-7873Code Injection Vulnerability in Code Validation Endpoint
Critical 9.9
In plain English
A critical-severity code injection in Langflow OSS from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.2% (higher than 94% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.9Critical
Exploit odds (30 days)6.2%top 6.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling3Metasploit, Nuclei, Public PoC
Official description
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | langflow | 1.10.1.rc0 | GHSA-v798-mcc6-2m3m |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Langflow OSS | 1.0.0 – through 1.10.0 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://www.ibm.com/support/pages/node/7278441 vendor-advisory, patch