Description
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 – ≤ 1.10.0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Langflow AI Code Validation Authenticated RCE
exploit/multi/http/langflow_auth_rce_cve_2026_7873
GitHub 1 repository
-
rmhowe425/POC-CVE-2026-7873 ★ 3 · Sep 5, 2026
PoC exploit code for CVE-2026-7873
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Langflow 1.7.2-1.10.0 - Authenticated Remote Code Execution http/cves/2026/CVE-2026-7873.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langflow | >= 1.0.0, < 1.10.1.rc0 | 1.10.1.rc0 | GHSA-v798-mcc6-2m3m |
References
- https://www.ibm.com/support/pages/node/7278441 vendor-advisory patch