{"data":{"id":"12df4132-ed73-4c6a-be77-c2c6172cdc2b","title":"CVE-2026-8476: IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching…","summary":"IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a critical remote code execution flaw tracked as CVE-2026-8476. The AsyncDiskCache class calls Python's unsafe pickle.loads() on cached objects read from disk, with no validation, integrity check or authentication. An attacker who can influence cached data, through file system access, malicious workflow inputs, custom components or API manipulation, can execute arbitrary code and fully compromise the system with the privileges of the Langflow server process.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-8476","publishedAt":"2026-07-17T20:17:30.623Z","cveId":"CVE-2026-8476","cweIds":["CWE-502"],"cvssScore":"9.9","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS remote code execution through disk-based cache deserialization","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00974,"epssCheckedAt":"2026-11-12T18:09:37.000Z","kevDateAdded":null,"advisoryAliases":["GHSA-r5mm-2qch-fmmr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T18:10:00.553Z","patchAvailable":null,"disclosureDate":"2026-07-17T20:17:30.623Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}