CVE-2026-8476: Disk Cache Deserialization Remote Code Execution Vulnerability
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads() function to deserialize cached objects from disk without validation, integrity verification, or authentication, enabling arbitrary code execution when malicious pickle payloads are processed. Attackers who can influence cached data through file system access, malicious workflow inputs, custom components, or API manipulation can achieve complete system compromise with the privileges of the Langflow server process.
Other sources
Langflow OSS contain a critical remote code execution vulnerability in the disk-based caching mechanism. The
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Langflow OSSto a version that resolves this vulnerability.Fixed in 1.10.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8476?
CVE-2026-8476 is classified as critical with a CVSS score of 9.9.
What is the impact of CVE-2026-8476?
CVE-2026-8476 allows for remote code execution due to unsafe deserialization in the disk cache.
How can I fix CVE-2026-8476?
To fix CVE-2026-8476, upgrade IBM Langflow OSS to version 1.10.1 or later, which addresses the vulnerability.
Who is affected by CVE-2026-8476?
CVE-2026-8476 affects IBM Langflow OSS versions 1.0.0 through 1.10.0.
What does CVE-2026-8476 exploit?
CVE-2026-8476 exploits the AsyncDiskCache class's use of Python's unsafe pickle.loads() function for deserializing cached objects.