IBM Langflow CVE-2026-7873

Exploitation requires an authenticated Langflow session (CVSS PR:L) reachable over the network (AV:N), with no user interaction (UI:N) and low complexity (AC:L) against versions 1.0.0-1.10.0. The key limiting factor is that the attacker must already hold a valid, even low-privileged, Langflow account, so the realistic risk concentrates in deployments that are internet-exposed, multi-tenant, or use weak/shared authentication; instances restricted to a small set of fully trusted operators behind network controls are substantially harder to reach. No special non-default feature toggle is named in the description - the code-injection path appears reachable through Langflow's normal flow-execution functionality.

The signals lean strongly toward genuine priority for any internet-reachable deployment: AV:N/AC:L means network-reachable, low-complexity exploitation, and S:C with C:H/I:H/A:H reflects full host takeover, yielding the 9.9 base score. The one limiting factor is PR:L - a valid (if low-privileged) Langflow account is required, so this is not unauthenticated mass-exploitable; in multi-tenant or exposed-with-weak-auth deployments that barrier is thin. No EPSS score, KEV listing, or SSVC decision data was provided, so probability of widespread exploitation cannot be quantified from the input; the absence of a KEV entry and of any referenced POC means there is no public exploit identified at time of analysis. Net: a high-confidence, high-impact issue gated only by needing an authenticated session, which should be patched urgently wherever Langflow is exposed beyond fully trusted users.

An attacker who has obtained or been granted a low-privilege Langflow account crafts a flow or input that injects OS commands into the server-side runtime, then executes commands to read credential files on the host. Using those harvested secrets, the attacker pivots to connected systems for lateral movement. No public exploit identified at time of analysis, but the low attack complexity makes weaponization straightforward for a capable adversary.