CVE-2026-8476

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0

Description A remote code execution issue exists in the disk-based caching mechanism. The AsyncDiskCache class uses the unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication. This allows arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data via file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.

Recommendations Update IBM Langflow OSS to a version later than 1.10.0.