CVE-2026-7524

CVSS Score & Metrics

Base Score

9.8 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H                                    

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.

Published Date

May 27, 2026

Last Modified

June 02, 2026

CWE ID

CWE-22

Source

NVD

Vendor

langflow

Product

langflow