← Database

CVE-2026-7524

CRITICAL CVSS: 9.8 Published: 2026-05-27 Modified: 2026-06-17

Description

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.

Affected Platforms

Langflow Langflow

Weakness Type

CWE-22

References