Vulnerability intelligence
CVE-2026-7803
IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
0.6%
Riskier than 49% of all CVEs · checked 2026-09-30
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Jul 4, 2026 · latest Jul 4, 2026
Coverage timeline
-
IBM Flags Critical Langflow Bugs Allowing Remote Code Executionsecurityonline.info · Jul 4, 2026