Vulnerability intelligence

CVE-2026-7871

IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.4%

Riskier than 37% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jul 4, 2026 · latest Jul 4, 2026

Coverage timeline

IBM Flags Critical Langflow Bugs Allowing Remote Code Execution
securityonline.info · Jul 4, 2026