Vulnerability intelligence

CVE-2026-7871

IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.7%

Riskier than 51% of all CVEs · checked 2026-10-01

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jul 4, 2026 · latest Jul 4, 2026

Coverage timeline

IBM Flags Critical Langflow Bugs Allowing Remote Code Execution
securityonline.info · Jul 4, 2026

Related CVEs — IBM

CVE-2026-6389 CVE-2026-16346 CVE-2026-17102 CVE-2026-18169 CVE-2026-18163 CVE-2026-18162 CVE-2026-84064 CVE-2026-84078