GHSA-v798-mcc6-2m3m

Langflow: Code Injection Vulnerability in Code Validation Endpoint

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-7873

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	langflow	>= 1.0.0, < 1.10.1.rc0	1.10.1.rc0

Details

As written in the advisory (Markdown source, shown as plain text).

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2026-7873 advisory
https://github.com/langflow-ai/langflow/pull/13696 web
https://github.com/langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02 web
https://github.com/langflow-ai/langflow package
https://github.com/langflow-ai/langflow/releases/tag/1.10.1.rc0 web
https://www.ibm.com/support/pages/node/7278441 web