AI and data stack advisories

Severe, 6 weeks533Projects324

533 severe, 6 weeks · 324 projects

LangflowGHSA-v798-mcc6-2m3m

Langflow: Code Injection Vulnerability in Code Validation Endpoint

Langflow

CVE-2026-7873 · Published Jun 30, 2026 · updated Oct 23, 2026

Critical9.9
Fix: upgrade to 1.10.1.rc0 or later
GitHub advisory

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

Affected versions

PackageAffectedFixed in
langflow
PyPI
>= 1.0.0, < 1.10.1.rc01.10.1.rc0
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-94
Also known as
CVE-2026-7873

More Langflow advisories

All Langflow
Critical 9.6Jun 19Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploitCVE-2026-55447fixed in 1.9.2High 7.5Jun 19Langflow: Unauthenticated DoS through multipart form boundary file uploadCVE-2026-55446fixed in 1.0.19Medium 6.1Jun 19Langflow: Logout button does not clear sessionCVE-2026-55423fixed in 1.7.0High 8.4Jun 19Langflow: insecure direct object referenceCVE-2026-55255fixed in 1.9.1Critical 9.3Jun 17Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leakCVE-2026-55450fixed in 1.9.1Medium 6.1Jun 16Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file readCVE-2026-48520fixed in 1.10.0