CVE-2026-7873

Code Injection Vulnerability in Code Validation Endpoint PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.0

CWE

CWE-94

References

https://www.ibm.com/support/pages/node/7278441

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.