VulnWatch VulnWatch
← Back to dashboard
High nvd · CVE-2026-93447

CVE-2026-93447: IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to

Published Oct 7, 2026 CVSS 7.5

IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.

Affected AI Products

langflow
Get the weekly digest. Every Monday: top AI security stories of the week. Free.