{"id":"CVE-2026-7873","published":"2026-06-30T19:13:16Z","modified":"2026-07-01T17:27:51Z","title":"Code Injection Vulnerability in Code Validation Endpoint","vendor":"IBM","product":"Langflow OSS","tier":"core","eol":null,"affectedVersions":[{"vendor":"IBM","product":"Langflow OSS","versions":[">= 1.0.0, <= 1.10.0"]}],"description":{"text":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.","provenance":"source","from":"CVE.org"},"summary":{"text":"A code injection flaw in the Code Validation endpoint of IBM Langflow OSS (versions 1.0.0 through 1.10.0) lets an attacker inject code that the component then processes. An authenticated attacker with network access and no user interaction can execute arbitrary OS commands and read sensitive files, including credentials, which can enable full system compromise and lateral movement.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T08:31:52Z"},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.0155,"percentile":0.7509,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-10-21","exploitedFirstSeen":null,"ransomware":false,"evidence":[],"evidenceTotal":0,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7278441","tags":["vendor-advisory","patch"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"langflow","vulnerableRanges":[">=1.0.0, <1.10.1.rc0"],"patched":["1.10.1.rc0"],"from":["GHSA-v798-mcc6-2m3m"],"provenance":"source"}],"advisories":[{"id":"GHSA-v798-mcc6-2m3m","url":"https://github.com/advisories/GHSA-v798-mcc6-2m3m","severity":"CRITICAL","ecosystem":"PyPI","package":"langflow","vulnerableRanges":[">=1.0.0, <1.10.1.rc0"],"patched":["1.10.1.rc0"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2026-40381","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40381","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2026-09-05","earliestUrl":"https://github.com/rmhowe425/POC-CVE-2026-7873","repos":[{"name":"rmhowe425/POC-CVE-2026-7873","url":"https://github.com/rmhowe425/POC-CVE-2026-7873","stars":3,"created":"2026-09-05"}]},"metasploit":[{"name":"Langflow AI Code Validation Authenticated RCE","module":"exploit/multi/http/langflow_auth_rce_cve_2026_7873","type":"exploit","disclosureDate":"2026-06-30","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb"}],"first":{"date":"2026-06-30","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-06-30","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2026-7873","provenance":"source"},{"date":"2026-06-30","kind":"exploit-public","label":"First public exploit: Metasploit; later: PoC-in-GitHub 2026-09-05","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":71.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":10.0,"detail":"added 11 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":15.02,"detail":"percentile 0.7509"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.93,"detail":"base score 9.9"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2026-55255","published":"2026-06-23","fixed":"1.9.2","kev":true},{"cve":"CVE-2026-55447","published":"2026-06-23","fixed":"1.9.2","kev":false},{"cve":"CVE-2026-48520","published":"2026-06-23","fixed":"1.10.0","kev":false,"link":{"from":"CVE-2026-48520","to":"CVE-2026-7873","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:langflow","fromFixed":"1.10.0","toFixed":"1.10.1.rc0","daysApart":7}]}},{"cve":"CVE-2026-7873","published":"2026-06-30","fixed":"1.10.1.rc0","kev":false},{"cve":"CVE-2026-10561","published":"2026-06-22","fixed":"1.10.1","kev":false},{"cve":"CVE-2026-105698","published":"2026-10-05","fixed":"1.10.1","kev":false},{"cve":"CVE-2026-51886","published":"2026-10-01","fixed":"1.10.1","kev":false}],"package":"PyPI:langflow"}}