CVE-2026-7803

Critical · 9.8

CVSS

9.8

EPSS

0.6%

Published

Jun 30, 2026

CISA due date

—

The record

IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields.

Affected packages

Ecosystem	Package	Introduced	Fixed