CVE-2026-7871

Insecure Deserialization in Redis Cache Backend PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.0

CWE

CWE-502

References

https://www.ibm.com/support/pages/node/7278443

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.