CVE-2026-3357

8.8 highEPSS 0.5%

High (8.8) in langflow langflow. EPSS 0.5% chance of exploitation in the next 30 days.

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2026-04-08
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

Affected

langflow:langflow

References

https://www.ibm.com/support/pages/node/7268428

Check your stack JSON