CVE-2026-7873
Attackers can execute OS commands and read sensitive files in IBM Langflow OSS.
This is a code injection flaw in the code validation endpoint of IBM Langflow OSS versions 1.0.0 through 1.10.0. An authenticated attacker can run arbitrary operating system commands and read credentials and other sensitive files, which could lead to full system compromise and spread to other systems. No fix has been announced; it is not yet known to be exploited in attacks.
IBM Langflow OSS · Updated 28 Oct · From the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 9.9 of 10
FixAvailableFixed versions below
Am I affected?
If you run a version older than the fixed one for your line, yes.
| Version line | Fixed in |
|---|---|
| langflow (pip) 1.10 | 1.10.1.rc0 |
What to do
- Check your IBM Langflow OSS version; if it is 1.0.0 through 1.10.0, consider it vulnerable.
- No fixed version has been provided by IBM. Apply any workaround advised by IBM or restrict access to the code validation endpoint.
- Limit authentication to only trusted users and monitor for unusual system commands or file access.
What happened
- 23 OctRapid7 reports a Metasploit module targeting Langflow, raising awareness of the vulnerability.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-7873 | Code Injection Vulnerability in Code Validation Endpoint | critical 9.9 | No | 1.6% |
Our reporting
We have not reported on it. It is here because the sources below did.
Reported elsewhere
Rapid7 · 23 OctMetasploit Wrap Up: Langflow, MongoDB, and More ↗The records
ibm.com: advisory ↗CVE-2026-7873 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works