Langflow OSS - RCE (CVE-2026-7873)
Description
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.
psychologyCrowdSec Analysis
CVE-2026-7873 is a critical vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.0 that allows authenticated attackers to execute arbitrary operating system commands and read sensitive files, including credentials. Successful exploitation could lead to complete system compromise and enable attackers to move laterally through connected environments.
CrowdSec has been tracking this vulnerability and its exploits since 3rd of November 2026.
CrowdSec has not observed any significant exploitation activity targeting CVE-2026-7873 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Authenticated exploitation attempts target POST /api/v1/validate/code with a Bearer token and Python code in the JSON code field, often using an outbound HTTP or DNS callback to verify command execution. Requests to /api/v1/auto_login or /api/v1/login may precede the exploit to obtain an access token.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2026-06-30 |
| Rule Released | 2026-11-03 |