Vulnerability intelligence

CVE-2026-7803

IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.4%

Riskier than 35% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jul 4, 2026 · latest Jul 4, 2026

Coverage timeline

IBM Flags Critical Langflow Bugs Allowing Remote Code Execution
securityonline.info · Jul 4, 2026