{"id":"CVE-2026-7873","aliases":["GHSA-v798-mcc6-2m3m"],"title":"Langflow: Code Injection Vulnerability in Code Validation Endpoint","summary":"Langflow: Code Injection Vulnerability in Code Validation Endpoint","severity":"critical","cvss":9.9,"cwe":["CWE-94"],"vendor":"langflow","product":"langflow","ecosystem":"pip","affected":["langflow >= 1.0.0, < 1.10.1.rc0"],"patched":["langflow 1.10.1.rc0"],"published":"2026-06-30","updated":"2026-10-23","sourceUpdated":"2026-10-23T20:51:08Z","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-v798-mcc6-2m3m","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7873"},{"url":"https://www.ibm.com/support/pages/node/7278441"},{"url":"https://github.com/langflow-ai/langflow/pull/13696"},{"url":"https://github.com/langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02"},{"url":"https://github.com/langflow-ai/langflow/releases/tag/1.10.1.rc0"},{"url":"https://github.com/advisories/GHSA-v798-mcc6-2m3m"}],"tags":["ghsa","pip","exploit-available"],"epss":0.01071,"epssPercentile":0.64622,"exploits":{"github":1,"githubRepos":["https://github.com/rmhowe425/POC-CVE-2026-7873"],"metasploit":["exploit/multi/http/langflow_auth_rce_cve_2026_7873"],"checkedAt":"2026-10-23T21:38:46.960Z"},"exploitAvailable":true,"ingestedAt":"2026-10-23T21:38:13.041Z","slug":"CVE-2026-7873","body":"## Overview\n\nIBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.\n\n## Affected packages\n\n- `langflow >= 1.0.0, < 1.10.1.rc0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `langflow 1.10.1.rc0`","depth":"abyssal","depthScore":67,"depthScoreParts":{"impact":54.5,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[]}