What is the CVSS score of CVE-2026-3357?

CVE-2026-3357 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Langflow Desktop are affected by CVE-2026-3357?

IBM Langflow Desktop versions 1.6.0-1.8.2 contain a critical remote code execution vulnerability in the FAISS component that allows authenticated users to execute arbitrary code through unsafe…. A patch is available.

How to fix or mitigate CVE-2026-3357?

Within 24 hours: Inventory all systems running IBM Langflow Desktop versions 1.6.0-1.8.2 and restrict network access to affected instances. Within 7 days: Apply vendor-released patch to upgrade all affected systems to version 1.8.3 or later per IBM security advisory. Within 30 days: Conduct audit of Langflow deployment logs to detect unauthorized deserialization attempts and verify patch compliance across all affected systems.

Langflow Desktop CVE-2026-3357

HIGH

Deserialization of Untrusted Data (CWE-502)

2026-04-08 ibm

Deserialization RCE IBM Langflow Desktop

8.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (ibm) · only source for this CVE.

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 08, 2026 - 01:00 vuln.today

Patch released

Apr 08, 2026 - 01:00 nvd

Patch available

CVE Published

Apr 08, 2026 - 00:19 nvd

HIGH 8.8

DescriptionCVE.org

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.

AnalysisAI

Remote code execution in IBM Langflow Desktop versions 1.6.0 through 1.8.2 allows authenticated attackers to execute arbitrary code via unsafe deserialization in the FAISS component. The vulnerability stems from an insecure default configuration that permits deserialization of untrusted data. With CVSS 8.8 (High) reflecting network accessibility, low complexity, and full impact on confidentiality, integrity, and availability, this represents a critical risk for organizations running affected versions. Vendor-released patch available through IBM security advisory. No public exploit identified at time of analysis, though the attack path is well-understood given the CWE-502 deserialization vulnerability class.

Technical ContextAI

This vulnerability affects the FAISS (Facebook AI Similarity Search) component integration within IBM Langflow Desktop, a desktop application for building AI/ML workflows. The issue is rooted in CWE-502 (Deserialization of Untrusted Data), a dangerous vulnerability class where applications deserialize user-controlled data without proper validation. Python's pickle module and similar serialization mechanisms can execute arbitrary code during deserialization if an attacker can control the serialized data stream. The insecure default configuration in Langflow Desktop 1.6.0-1.8.2 fails to restrict or validate data before deserialization in the FAISS component, which is typically used for vector similarity search in machine learning pipelines. The affected product CPE (cpe:2.3:a:ibm:langflow_desktop) confirms this is specific to IBM's desktop distribution of Langflow, not the upstream open-source project.

RemediationAI

Organizations running IBM Langflow Desktop should immediately upgrade to a patched version beyond 1.8.2 as specified in the IBM security advisory. The vendor has released a patch addressing the insecure deserialization configuration in the FAISS component. Consult the official IBM advisory at https://www.ibm.com/support/pages/node/7268428 for exact patched version numbers and upgrade instructions. As an interim mitigation for environments where immediate patching is not feasible, restrict network access to Langflow Desktop instances to only trusted users and networks, implement strong authentication controls, and monitor for suspicious deserialization attempts or unexpected code execution. However, configuration changes cannot fully remediate CWE-502 vulnerabilities, making vendor patching the only complete solution. Review access logs for any authenticated users who may have exploited this vulnerability prior to patching.