High
nvd
·
CVE-2026-93447
CVE-2026-93447: IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to
Published Oct 7, 2026
CVSS 7.5
IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.
Affected AI Products
langflow