CVE-2026-8476

critical · 9.9

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication, enabling arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.

9.9

CVSS

1.0%

EPSS (exploit prob.)

61st

EPSS percentile

2026-07-17

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-502

Affected products

Vendor	Product	Affected versions
langflow	langflow	>= 1.0.0, < 1.10.1
apple	macos	all versions
linux	linux_kernel	all versions
microsoft	windows	all versions

Check a specific version with /api/v1/cve/match.

References

https://www.ibm.com/support/pages/node/7278922

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-8476