What is the CVSS score of CVE-2026-7872?

CVE-2026-7872 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Which versions of IBM Langflow are affected by CVE-2026-7872?

IBM Langflow OSS versions 1.0.0-1.10.0 contain a file-read vulnerability allowing any authenticated user to extract the JWT signing key and forge admin credentials, enabling privilege escalation and…. A patch is available.

How to fix or mitigate CVE-2026-7872?

Within 24 hours: identify all IBM Langflow OSS deployments and determine which run versions 1.0.0-1.10.0. Within 7 days: apply the vendor-released patch to all affected instances, prioritizing production systems. Within 30 days: audit authentication logs for anomalous admin token generation or failed escalation attempts during the exposure window, verify patch deployment across all systems, and evaluate additional access controls such as IP allowlisting or session monitoring to limit damage from compromised user accounts.

IBM Langflow CVE-2026-7872

HIGH

Path Traversal (CWE-22)

2026-07-17 ibm

IBM Path Traversal Langflow Oss

7.5

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

8.1 HIGH

PR:L because the description requires an authenticated attacker; I:H added because reading the JWT signing key enables token forgery and account takeover beyond mere file disclosure.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 17, 2026 - 19:48 vuln.today

CVE Published

Jul 17, 2026 - 19:15 cve.org

HIGH 7.5

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user.

AnalysisAI

Arbitrary file read in IBM Langflow OSS versions 1.0.0 through 1.10.0 lets an authenticated attacker retrieve sensitive files - including the JWT signing key - via path traversal (CWE-22), then forge valid authentication tokens to impersonate any user, including administrators. This turns a read-only file disclosure into a full authentication-bypass and account-takeover primitive. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate to Langflow service

Delivery

Send path-traversal file-read request

Exploit

Disclose JWT signing key from disk

Execution

Forge admin JWT with stolen key

Impact

Impersonate any user, take over instance

Access

Authenticate to Langflow service

Delivery

Send path-traversal file-read request

Exploit

Disclose JWT signing key from disk

Execution

Forge admin JWT with stolen key

Impact

Impersonate any user, take over instance

Vulnerability AssessmentAI

Exploitation	The attacker must reach the Langflow web/API service over the network (AV:N) and, per the description, hold an authenticated session - a limiting factor that contradicts the CVSS PR:N and should be verified with IBM. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The supplied CVSS 3.1 base score is 7.5 (High) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - network-reachable, low complexity, no privileges, confidentiality-only. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker with access to the Langflow service sends a crafted request whose file parameter contains directory-traversal sequences to read the server's JWT signing key from disk. Using that key, the attacker forges a JWT asserting an administrator identity and presents it to the API, gaining full authenticated control of the Langflow instance and its workflows. …
Remediation	Patch available per vendor advisory - upgrade IBM Langflow OSS to the fixed release identified in IBM's advisory at https://www.ibm.com/support/pages/node/7278934 (an exact fixed version string was not provided in the input and should be confirmed from that page). … Detailed patch versions, workarounds, and compensating controls in full report.