CVE Intelligence
Analysis AI-assisted

CVE-2026-7873: IBM Langflow OSS: Code Injection Enabling OS Command Execution

IBM published CVE-2026-7873, a critical code injection weakness (CWE-94) in Langflow OSS versions 1.0.0 through 1.10.0, with a CVSS 3.1 base score of 9.9 assigned by IBM PSIRT. According to the record, an authenticated attacker can run operating system commands and read sensitive files, including credentials. The record lists no fixed version and no CISA KEV listing.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

IBM has published a vulnerability record for Langflow OSS affecting versions 1.0.0 through 1.10.0. According to the record, an authenticated attacker can run arbitrary operating system commands and read sensitive files, including credentials. The CVE data classifies the weakness as CWE-94 (Code Injection).

Impact

  • Arbitrary operating system command execution on hosts running the affected software.
  • Reading of sensitive files, including credentials.
  • The record states this enables complete system compromise and lateral movement. The CVSS 3.1 vector reports high impact on confidentiality, integrity and availability, with scope changed.

Affected products and versions

  • Product: Langflow Langflow (IBM Langflow OSS).
  • Range: greater than or equal to 1.0.0 and less than or equal to 1.10.0.
  • No fixed version is listed in the record consulted.

Exploitation status

This CVE is not listed in the CISA KEV catalog in the record consulted. No confirmed exploitation in the wild appears in the sources consulted. The EPSS estimate of about 1.07 percent is a statistical probability and is not evidence of exploitation.

Remediation and mitigation

  • Review the IBM vendor advisory for current fix status and upgrade guidance, since the record does not list a fixed version.
  • Inventory all Langflow OSS deployments and identify those within the 1.0.0 to 1.10.0 range.
  • Restrict which accounts hold authenticated access to the application and remove access that is not needed.
  • As a precaution, rotate credentials that were stored in or reachable from affected deployments.
  • Limit network exposure of the service and separate it from sensitive systems.

Detection guidance

  • Review authentication and application logs for unusual activity from authenticated sessions.
  • Monitor for unexpected child processes started by the Langflow service and for access to credential files or configuration secrets.
  • Track outbound connections from hosts running Langflow that fall outside normal operation.

Limitations of the available information

  • The record does not list a fixed version, patch details or workarounds beyond the vendor reference.
  • The content of the vendor advisory was not reviewed in this analysis, so vendor-specific guidance is unknown here.
  • Prerequisites beyond authentication are unknown.
  • The EPSS date in the record is later than the publication date and should be verified against the source.

Frequently asked questions

What does CVE-2026-7873 allow?

According to the record, an authenticated attacker can run arbitrary operating system commands and read sensitive files, including credentials, in IBM Langflow OSS 1.0.0 through 1.10.0.

Is there a fixed version?

The record consulted does not list a fixed version. Check the IBM vendor advisory for current fix status and upgrade guidance.

Is this vulnerability being actively exploited?

This CVE is not listed in the CISA KEV catalog in the record consulted, and no confirmed exploitation in the wild appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.