{"data":{"id":"64d66dc7-339a-441d-b23a-a78c304b7040","title":"CVE-2026-7873: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read…","summary":"CVE-2026-7873 affects IBM Langflow OSS versions 1.0.0 through 1.10.0. It allows an authenticated attacker to execute arbitrary OS commands and read sensitive files, including credentials, which enables complete system compromise and lateral movement. The weakness is classified as CWE-94, Improper Control of Generation of Code ('Code Injection'), and NVD has not yet provided its assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7873","publishedAt":"2026-06-30T20:17:31.750Z","cveId":"CVE-2026-7873","cweIds":["CWE-94"],"cvssScore":"9.9","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS arbitrary OS command execution by authenticated attackers","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.01071,"epssCheckedAt":"2026-10-14T06:09:07.659Z","kevDateAdded":null,"advisoryAliases":["GHSA-v798-mcc6-2m3m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:47:12.929Z","patchAvailable":null,"disclosureDate":"2026-06-30T20:17:31.750Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}