CVE-2026-7873 json
Code Injection Vulnerability in Code Validation Endpoint
published 2026-06-30 4 mo ago modified 2026-10-25 14 d ago also GHSA-v798-mcc6-2m3m , EUVD-2026-40381
- cvss
- 9.9
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 6.2%
- EPSS 6.2% chance of exploitation in 30 days, percentile 93%
- public exploits
- 1
- Metasploit, plus a Nuclei check
Summary
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
Patch / fix
- pypi langflow 1.10.1.rc0
Timeline
- First public exploit (Metasploit exploit/multi/http/langflow_auth_rce_cve_2026_7873)
- Published
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 4 mo ago
Exploit prediction
6.21% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/multi/http/langflow_auth_rce_cve_2026_7873 Langflow AI Code Validation Authenticated RCE metasploit exploit, excellent rank, 2026-06-30
- Nuclei template Langflow 1.7.2-1.10.0 - Authenticated Remote Code Execution nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 9.9 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| GitHub | 3.1 | 9.9 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | langflow | >=1.0.0, <1.10.1.rc0 |
1.10.1.rc0 |
Affected products
- IBM Langflow OSS
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
ibm.com
/support/pages/node/7278441
vendor-advisory, patch, web
-
github.com
/langflow-ai/langflow/pull/13696
web
-
github.com
/langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02
web
-
nvd.nist.gov
/vuln/detail/CVE-2026-7873
advisory
-
github.com
/langflow-ai/langflow
package
-
github.com
/langflow-ai/langflow/releases/tag/1.10.1.rc0
web
Sources
- CVE List CVE-2026-7873
- GitHub Advisory GHSA-v798-mcc6-2m3m
- NVD CVE-2026-7873
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.