CVE-2026-7871CWE-502

Insecure Deserialization in Redis Cache Backend

Critical · published June 30, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00695 · 52.4th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-06-30T19:14Z
EPSS history
Timeline
  • 30 JUN 19:14Z
    Insecure Deserialization in Redis Cache Backend
    cvelistv5