CVE-2026-8476
CRITICAL
CVSS 9.9
langflow_oss
Verified Advisory
Remote code execution via unsafe pickle deserialization in Langflow OSS (CVE-2026-8476)
CVE-2026-8476 is a critical remote code execution vulnerability in the disk-based caching mechanism of Langflow OSS. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.
Affected versions:
- 1.0.0-1.10.0
We recommend updating to: 1.10.1.
CVSS 9.9 · our assessment: act_now
Vendor advisory: https://www.ibm.com/support/pages/node/7278922
Details: https://vuln.today/cve/CVE-2026-8476
Verified by vuln.today against published advisories.
Affected versions
- – 1.0.0-1.10.0
Fixed in: 1.10.1
More advisories for langflow_oss
- CVE-2026-13446 – Hard-coded credentials in IBM Langflow OSS (CVE-2026-13446)
- CVE-2026-13445 – Insecure file path handling in IBM Langflow OSS (CVE-2026-13445)
- CVE-2026-13448 – Unauthenticated remote code execution in IBM Langflow (CVE-2026-13448)
- CVE-2026-14499 – OS command injection in IBM Langflow OSS Python Interpreter (CVE-2026-14499)
- CVE-2026-7667 – Path traversal in the API Request component of IBM Langflow OSS (CVE-2026-7667)
- CVE-2026-7754 – Server-side request forgery (SSRF) in IBM Langflow OSS (CVE-2026-7754)
- CVE-2026-7872 – Path traversal in Langflow OSS File component tar extraction (CVE-2026-7872)
- CVE-2026-7755 – Remote code execution in IBM Langflow OSS (CVE-2026-7755)