EUVD-2026-40382
GHSA-2fmj-c726-jmv7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation requires write access to the backend Redis store, so PR:H rather than PR:N; once that access exists it is network-reachable, low-complexity, and yields full C/I/A compromise.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity.
Articles & Coverage 1
AnalysisAI
Insecure deserialization (CWE-502) in IBM Langflow OSS versions 1.0.0 through 1.10.0 lets any party with access to the backing Redis store inject a malicious serialized object that Langflow deserializes, yielding arbitrary code execution with full application privileges. Successful exploitation exposes all stored secrets, flow data, and the underlying host, effectively a complete compromise of the Langflow instance. No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV; a vendor patch is available per IBM advisory node 7278443.
Technical ContextAI
Langflow is an open-source, Python-based low-code framework for visually building LLM/agent applications; it uses Redis as a shared cache/state and message backend. The flaw is a CWE-502 deserialization-of-untrusted-data issue: Langflow reads values from Redis and reconstructs application objects from them without validating that the serialized payload is trustworthy. Because Python deserialization (e.g. pickle-style object reconstruction) can invoke arbitrary callables during object reconstruction, an attacker who can place a crafted value into the keys Langflow reads turns a data channel into a code-execution channel. The CPE cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:* confirms the affected component is the IBM Langflow OSS application across the listed version range.
RemediationAI
Apply the IBM-released patch documented at https://www.ibm.com/support/pages/node/7278443 and upgrade to the fixed Langflow OSS version specified there (an exact fix version is not given in the available data, so confirm it from the advisory before deploying). As compensating controls until patched: bind Redis to localhost or a private interface only and never expose it to untrusted networks; enable Redis authentication (requirepass) and, where supported, TLS, so arbitrary users cannot write keys Langflow consumes; restrict network access to the Redis port (default 6379) with host/firewall rules so only the Langflow application can reach it; and consider Redis ACLs to limit which clients can write to the keys Langflow reads. Trade-offs: enabling AUTH/TLS or tightening ACLs requires updating Langflow's Redis connection configuration and may break existing automation or shared-cache integrations, so test connectivity after each change.
Privilege escalation to root in the LiteSpeed User-End cPanel Plugin (versions 2.3 through before 2.4.5) lets attackers
UAF in Redis 8.2.1 via crafted Lua scripts by authenticated users. EPSS 12.4%. Patch available.
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10,
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. Rated cr
Code injection in OneUptime monitoring via custom JS monitor using vm module. PoC and patch available.
In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerab
An issue was found in Apache Airflow versions 1.10.10 and below. Rated critical severity (CVSS 9.8), this vulnerability
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4
goanother Another Redis Desktop Manager =<1.6.1 is vulnerable to Cross Site Scripting (XSS) via src/components/Setting.v
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Deserialization
View allShare
External POC / Exploit Code
Leaving vuln.today