Vulnerability · Published Jul 17, 2026 · Assigned by ibm

CVE-2026-8476Disk Cache Deserialization Remote Code Execution Vulnerability

Critical 9.9

In plain English

A critical-severity unsafe deserialization in Langflow OSS from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)1.0%top 37.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication, enabling arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.

Affected products (as reported)

Vendor	Product	Versions
IBM	Langflow OSS	1.0.0 – through 1.10.0

Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://www.ibm.com/support/pages/node/7278922 vendor-advisory, patch