Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-8476: IBM Langflow OSS disk caching allows malicious code execution

CVE-2026-8476

Summary

IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a critical security flaw in their disk caching system. This means an attacker could potentially take control of the entire system if they can manipulate data stored on the server's disk. To protect your system, update to a newer version of IBM Langflow OSS that has this issue fixed.

Original title

Original description

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication, enabling arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.

nvd CVSS3.1 9.9

Vulnerability type

CWE-502 Deserialization of Untrusted Data

https://www.ibm.com/support/pages/node/7278922

Published: 17 Jul 2026 · Updated: 20 Jul 2026 · First seen: 17 Jul 2026