---
id: CVE-2026-7873
aliases:
  - GHSA-v798-mcc6-2m3m
title: 'Langflow: Code Injection Vulnerability in Code Validation Endpoint'
summary: 'Langflow: Code Injection Vulnerability in Code Validation Endpoint'
severity: critical
cvss: 9.9
cwe:
  - CWE-94
vendor: langflow
product: langflow
ecosystem: pip
affected:
  - 'langflow >= 1.0.0, < 1.10.1.rc0'
patched:
  - langflow 1.10.1.rc0
published: '2026-06-30'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T20:51:08Z'
source: GHSA
sourceUrl: 'https://github.com/advisories/GHSA-v798-mcc6-2m3m'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-7873'
  - url: 'https://www.ibm.com/support/pages/node/7278441'
  - url: 'https://github.com/langflow-ai/langflow/pull/13696'
  - url: >-
      https://github.com/langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02
  - url: 'https://github.com/langflow-ai/langflow/releases/tag/1.10.1.rc0'
  - url: 'https://github.com/advisories/GHSA-v798-mcc6-2m3m'
tags:
  - ghsa
  - pip
  - exploit-available
epss: 0.01071
epssPercentile: 0.64622
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/rmhowe425/POC-CVE-2026-7873'
  metasploit:
    - exploit/multi/http/langflow_auth_rce_cve_2026_7873
  checkedAt: '2026-10-23T21:38:46.960Z'
exploitAvailable: true
ingestedAt: '2026-10-23T21:38:13.041Z'
---

## Overview

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

## Affected packages

- `langflow >= 1.0.0, < 1.10.1.rc0`

## Remediation

Upgrade to a patched release:

- `langflow 1.10.1.rc0`