---
id: CVE-2026-7873
aliases:
  - GHSA-v798-mcc6-2m3m
title: 'Langflow: Code Injection Vulnerability in Code Validation Endpoint'
summary: 'Langflow: Code Injection Vulnerability in Code Validation Endpoint'
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
vendor: langflow
product: langflow
ecosystem: pip
affected:
  - 'langflow >= 1.0.0, < 1.10.1.rc0'
patched:
  - langflow 1.10.1.rc0
published: '2026-06-30'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T21:00:05.302716406Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-v798-mcc6-2m3m'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-7873'
  - url: 'https://github.com/langflow-ai/langflow/pull/13696'
  - url: >-
      https://github.com/langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02
  - url: 'https://github.com/langflow-ai/langflow'
  - url: 'https://github.com/langflow-ai/langflow/releases/tag/1.10.1.rc0'
  - url: 'https://www.ibm.com/support/pages/node/7278441'
  - url: 'https://github.com/advisories/GHSA-v798-mcc6-2m3m'
tags:
  - osv
  - pip
  - exploit-available
  - ghsa
epss: 0.0155
epssPercentile: 0.74952
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/rmhowe425/POC-CVE-2026-7873'
  metasploit:
    - exploit/multi/http/langflow_auth_rce_cve_2026_7873
  checkedAt: '2026-10-27T19:13:47.175Z'
exploitAvailable: true
cwe:
  - CWE-94
ingestedAt: '2026-10-23T21:38:13.041Z'
---

## Overview

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

## Affected packages

- `langflow >= 1.0.0, < 1.10.1.rc0`

## Remediation

Upgrade to a patched release:

- `langflow 1.10.1.rc0`