All vulnerabilities
CVE-2026-7873GHSA-v798-mcc6-2m3m

Langflow: Code Injection Vulnerability in Code Validation Endpoint

IBM langflowpipApplications & CMS
Open in ThreatlineRecord JSON
CVSS
9.9Critical
ExploitationPublic exploit codeExploit module, 30 Jun 2026. Not in the KEV catalogMetasploit
Exploit odds (EPSS)1.07%Chance of exploitation activity in the next 30 days, higher than 64% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.10.1.rc0Fixed versionGitHub
Published30 Jun 2026Updated 23 Oct 2026CVE List

What fixes it

  • 1.10.1.rc0langflow, pipGitHub
  • 1.10.1.rc0langflow, PyPIOSVpip install "langflow>=1.10.1.rc0"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 30 Jun 2026Exploit code publicMetasploit
  2. 30 Jun 2026, 19:13 UTCPublishedCVE List

Public exploit code and templates 1

  • Exploit moduleLangflow AI Code Validation Authenticated RCE 30 Jun 2026Metasploit

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

Text from CVE List

Affected versions 53

  • langflow, pip>= 1.0.0, < 1.10.1.rc0GitHub
  • Langflow OSSaffected: 1.0.0 through 1.10.0CVE List
  • langflow, PyPIfrom 1.0.0, fixed in 1.10.1.rc0OSV
  • langflow, PyPI1.0.0OSV
  • langflow, PyPI1.0.1OSV
  • langflow, PyPI1.0.10OSV
  • langflow, PyPI1.0.11OSV
  • langflow, PyPI1.0.12OSV
  • langflow, PyPI1.0.13OSV
  • langflow, PyPI1.0.14OSV
  • langflow, PyPI1.0.15OSV
  • langflow, PyPI1.0.16OSV
  • langflow, PyPI1.0.17OSV
  • langflow, PyPI1.0.18OSV
  • langflow, PyPI1.0.19OSV
  • langflow, PyPI1.0.19.post1OSV
  • langflow, PyPI1.0.19.post2OSV
  • langflow, PyPI1.0.2OSV
  • langflow, PyPI1.0.3OSV
  • langflow, PyPI1.0.4OSV
  • langflow, PyPI1.0.5OSV
  • langflow, PyPI1.0.6OSV
  • langflow, PyPI1.0.7OSV
  • langflow, PyPI1.0.8OSV
  • langflow, PyPI1.0.9OSV
  • langflow, PyPI1.1.0OSV
  • langflow, PyPI1.1.1OSV
  • langflow, PyPI1.1.2OSV
  • langflow, PyPI1.1.3OSV
  • langflow, PyPI1.1.4OSV
  • langflow, PyPI1.1.4.post1OSV
  • langflow, PyPI1.10.0OSV
  • langflow, PyPI1.10.0rc0OSV
  • langflow, PyPI1.2.0OSV
  • langflow, PyPI1.3.0OSV
  • langflow, PyPI1.3.1OSV
  • langflow, PyPI1.3.2OSV
  • langflow, PyPI1.3.3OSV
  • langflow, PyPI1.3.4OSV
  • langflow, PyPI1.4.0OSV
  • langflow, PyPI1.4.1OSV
  • langflow, PyPI1.4.2OSV
  • langflow, PyPI1.4.3OSV
  • langflow, PyPI1.5.0OSV
  • langflow, PyPI1.5.0.post1OSV
  • langflow, PyPI1.5.0.post2OSV
  • langflow, PyPI1.5.1OSV
  • langflow, PyPI1.6.0OSV
  • langflow, PyPI1.6.1OSV
  • langflow, PyPI1.6.2OSV
  • langflow, PyPI1.6.3OSV
  • langflow, PyPI1.6.4OSV
  • langflow, PyPI1.6.5OSV

References 6