Advisory details:
github_osv / GHSA-v798-mcc6-2m3m
| Advisory ID | github_osv/GHSA-v798-mcc6-2m3m |
| Aliases |
CVE-2026-7873
|
| Summary | Langflow: Code Injection Vulnerability in Code Validation Endpoint IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 8.9 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | 9.9 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-v798-mcc6-2m3m/GHSA-v798-mcc6-2m3m.json |
| generic_textual | CRITICAL |
| Data source | Metasploit |
|---|---|
| Description | Langflow versions 1.0.0 through 1.10.0 are susceptible to authenticated remote code execution due to improper validation of code in the `/api/v1/validate/code` endpoint. Arbitrary code is executed under the context of the backend Langflow process. |
| Note | Stability: - crash-safe SideEffects: - ioc-in-logs Reliability: - repeatable-session |
| Ransomware campaign use | Unknown |
| Source publication date | June 30, 2026 |
| Platform | Python |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
There are no SSVC decisions available.