HIGHVulnerability
Verified
Global
NVD HIGH: CVE-2026-93447 — IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the...
·Source: NIST NVD
Updated:
Executive Summary
IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.
Analysis
IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process. CVSS Score: 7.5. Published: 2026-10-07T01:16:34.787.