SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-8476

CRITICAL · CVSS 9.9 EPSS 0.49% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

IBM Langflow OSS versions 1.0.0 to 1.10.0 are vulnerable due to a critical remote code execution flaw in the AsyncDiskCache class, which improperly deserializes cached objects using Python's unsafe pickle.loads() function. This vulnerability allows attackers with access to influence cached data—through file system access, malicious inputs, or API manipulation—to execute arbitrary code, potentially leading to complete system compromise. Organizations using affected versions should prioritize immediate remediation to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-8476
Severity
CRITICAL
CVSS
9.9
EPSS
0.49%

Original NVD Description

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication, enabling arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.

Related CVEs

Other vulnerabilities affecting the same vendor(s)