CVE-2026-7873

Katalog CVE

CVSS 9.9 · Critical EPSS 1,1%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada langflow. Skor CVSS 3.1 9.9 (Critical) menurut us.ibm.com.

Deskripsi (NVD)

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

Rincian

Terbit di NVD

30 Juni 2026

Terakhir diubah

2 Juli 2026

Status NVD

Analyzed

CVSS 3.1

9.9 (Critical), sumber us.ibm.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ibm.com/support/pages/node/7278441 advisory vendor