Remote code execution via unsafe pickle deserialization in Langflow OSS (CVE-2026-8476)

CVE-2026-8476 is a critical remote code execution vulnerability in the disk-based caching mechanism of Langflow OSS. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process. Affected versions: - 1.0.0-1.10.0 We recommend updating to: 1.10.1. CVSS 9.9 · our assessment: act_now Vendor advisory: https://www.ibm.com/support/pages/node/7278922 Details: https://vuln.today/cve/CVE-2026-8476