Dashboard / CVE-2026-7873

CVE-2026-7873

CRITICAL
INFO Priority: 0.15 BB Relevance: 70/100
Published: 2026-06-30 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Changed
C: High
I: High
A: High

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
langflow langflow 1.0.0 – 1.10.0

References & Advisories (1)

Bug Bounty Relevance

70 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

9.9 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploitation Probability

1.55%
Raw Score 0.015500
Percentile 75.0%
Date 2026-10-28

Intelligence Sources

nvd ref →

External Links