{"id":"CVE-2026-93447","published":"2026-10-07T01:16:34.787","lastModified":"2026-10-08T18:24:12.540","description":"IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":["langflow"],"products":["langflow"],"references":[{"url":"https://www.ibm.com/support/pages/node/7290694","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A deserialization vulnerability in IBM Langflow allows remote code execution when an attacker can write to Redis cache and has server secret access. This affects versions 1.0.0 through 1.12.2.","exploitability":"Exploitation requires moderate effort with preconditions: access to server secret, Redis write permissions, and the ability to inject malicious serialized data into cache.","blast_radius":"If exploited, attackers could execute arbitrary code as the service process user, potentially leading to full system compromise through the Langflow application.","remediation":"Upgrade to IBM Langflow 1.12.3 or later to remediate this deserialization vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","deserialization","web","cache"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:04:03.037Z"}}