CVE-2026-8476

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication, enabling arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.

CVSS v3 9.9 CRITICAL

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7278922	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

24 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) IBM Langflow OSS 1.0.0 hasta 1.10.0 contienen una crítica vulnerabilidad de ejecución remota de código en el mecanismo de caché basado en disco. La clase AsyncDiskCache utiliza la función insegura pickle.loads() de Python para deserializar objetos en caché desde el disco sin validación, verificación de integridad o autenticación, lo que permite la ejecución de código arbitrario cuando se procesan cargas útiles pickle maliciosas. Atacantes que pueden influir en los datos en caché a través del acceso al sistema de archivos, entradas de flujo de trabajo maliciosas, componentes personalizados o manipulación de la API pueden lograr un compromiso completo del sistema con los privilegios del proceso del servidor Langflow.

Information

Published : 2026-07-17 20:17

Updated : 2026-10-24 20:10

NVD link : CVE-2026-8476

Mitre link : CVE-2026-8476

CVE.ORG link : CVE-2026-8476

JSON object : View

Products Affected

linux

linux_kernel

langflow

langflow

microsoft

windows

apple

macos

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2026-8476", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8476", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-22T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_oss:1.10.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Langflow OSS", "versions": [{"status": "affected", "version": "1.0.0", "versionType": "semver", "lessThanOrEqual": "1.10.0"}]}]}], "published": "2026-07-17T20:17:30.623", "references": [{"url": "https://www.ibm.com/support/pages/node/7278922", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class\u00a0uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication, enabling arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process."}, {"lang": "es", "value": "IBM Langflow OSS 1.0.0 hasta 1.10.0 contienen una cr\u00edtica vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo en el mecanismo de cach\u00e9 basado en disco. La clase AsyncDiskCache utiliza la funci\u00f3n insegura pickle.loads() de Python para deserializar objetos en cach\u00e9 desde el disco sin validaci\u00f3n, verificaci\u00f3n de integridad o autenticaci\u00f3n, lo que permite la ejecuci\u00f3n de c\u00f3digo arbitrario cuando se procesan cargas \u00fatiles pickle maliciosas. Atacantes que pueden influir en los datos en cach\u00e9 a trav\u00e9s del acceso al sistema de archivos, entradas de flujo de trabajo maliciosas, componentes personalizados o manipulaci\u00f3n de la API pueden lograr un compromiso completo del sistema con los privilegios del proceso del servidor Langflow."}], "lastModified": "2026-10-24T20:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A32785B1-3CF7-4BD0-B6F8-1AA77D4E565B", "versionEndExcluding": "1.10.1", "versionStartIncluding": "1.0.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}