{"data":{"id":"8b02218a-783b-4d02-81b3-c96b19310ca8","title":"CVE-2026-7803: IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes…","summary":"CVE-2026-7803 affects IBM Langflow OSS versions 1.0.0 through 1.10.0. Improper validation of flow nodes that have missing or empty component type fields could allow arbitrary code execution. The weakness is classified as CWE-20, Improper Input Validation, and NVD had not yet provided an assessment when the entry was published on 06/30/2026.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7803","publishedAt":"2026-06-30T20:17:31.413Z","cveId":"CVE-2026-7803","cweIds":["CWE-20"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS arbitrary code execution through flow node validation","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00643,"epssCheckedAt":"2026-10-14T12:12:42.415Z","kevDateAdded":null,"advisoryAliases":["GHSA-qrxw-fw7h-wjxj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:47:13.916Z","patchAvailable":null,"disclosureDate":"2026-06-30T20:17:31.413Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}