{"cvss":9.9,"datePublished":"2026-10-21T00:00:00Z","dateUpdated":"2026-10-21T00:00:00Z","description":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.","dueDate":"","id":"CVE-2026-7873","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Langflow","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"Langflow Langflow Improper Control of Generation of Code","vendor":"Langflow"}