Live › vulnerability › CVE-2026-7873
Go to dashboardLangflow, an open-source framework for building LLM apps, has a code injection flaw in its code validation endpoint. An logged-in attacker can run arbitrary OS commands and read sensitive files such as credentials on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 20:59 UTC, 3h before NVD. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| langflow | pypi | >= 1.0.0, < 1.10.1.rc0 | 1.10.1.rc0 |
| langflow | vendor | >= 1.0.0, <= 1.10.0 | – |
Unknown from the sources. In the analyst’s queue.
Upgrade the langflow PyPI package to 1.10.1.rc0 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
This page as .md · .json · in your agent: get_signal("CVE-2026-7873")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.