CVE-2026-7873

CRITICAL CVSS 9.9 View on NVD ↗

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://www.ibm.com/support/pages/node/7278441

Published: Jun 30, 2026 20:17 UTC Modified: Jul 01, 2026 13:58 UTC