CriticalVulnerability
CVE-2026-8476: IBM Langflow OSS remote code execution through disk-based cache deserialization
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-8476
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 1.0%
Summary
IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a critical remote code execution flaw tracked as CVE-2026-8476. The AsyncDiskCache class calls Python's unsafe pickle.loads() on cached objects read from disk, with no validation, integrity check or authentication. An attacker who can influence cached data, through file system access, malicious workflow inputs, custom components or API manipulation, can execute arbitrary code and fully compromise the system with the privileges of the Langflow server process.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-127202: MLflow path traversal through model_id in the log outputs APISimilar attack · NVD/CVE Database
- LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
- MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
- MediumAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsSimilar attack · Palo Alto Unit 42
- MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database