9.8 CriticalCWE-22
CVE-2026-7524
IBM Langflow OSS vulnerability
IBMLangflow OSS
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.8%probability of exploitation in the next 30 days
Higher than 56% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.
Coverage 1 article · 1 outlet
- IBM warns of critical CVE-2026-7524 flaw in Langflow AI frameworkSecurityOnline · first in our coverage