Get real-time updates on Telegram
CVE-2026-7873: langflow >= 1.0.0, < 1.10.1.rc0
CVE-2026-7873 affects langflow. CVSS 3.1 base score 9.9 (GitHub Advisory Database). EPSS 0.01071 (percentile 0.64601), scored 22-Oct-2026. Affected range: >= 1.0.0, < 1.10.1.rc0. Fixed version: 1.10.1.rc0.
Affected technology
langflow · >= 1.0.0, < 1.10.1.rc0
Vendor not specified by the source
Description’s affected range: through 1.10.0
Component: Not specified by the source
Attack conditions (GitHub Advisory Database, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Authenticated attackers can execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement. GitHub Advisory Database’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high.
- Product
- langflow
- CCR priority
- 39.9 /100 (P4)
- CVSS 3.1
- 9.9 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · GitHub Advisory Database
- EPSS
- 0.01071 · percentile 0.64601 · 2026-10-22
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-24 01:45:06.114611+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-7873.html