CVE-2026-3357 - Vulnerability Details - OpenCVE

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ibm	Langflow Desktop

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7268428

History

Wed, 08 Apr 2026 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 08 Apr 2026 01:00:00 +0000

Type	Values Removed	Values Added
Description		IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.
Title		IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file
First Time appeared		Ibm Ibm langflow Desktop
Weaknesses		CWE-502
CPEs		cpe:2.3:a:ibm:langflow_desktop:1.6.0:::::::* cpe:2.3:a:ibm:langflow_desktop:1.8.2:::::::*
Vendors & Products		Ibm Ibm langflow Desktop
References		https://www.ibm.com/support/pages/node/7268428
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-04-08T00:19:11.414Z

Updated: 2026-04-08T15:41:55.112Z

Reserved: 2026-02-27T18:17:58.431Z

Link: CVE-2026-3357

Vulnrichment

Updated: 2026-04-08T15:41:50.528Z

NVD

Status : Awaiting Analysis

Published: 2026-04-08T01:16:41.057

Modified: 2026-04-08T21:26:35.910

Link: CVE-2026-3357

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3357", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-02-27T18:17:58.431Z", "datePublished": "2026-04-08T00:19:11.414Z", "dateUpdated": "2026-04-08T15:41:55.112Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-08T00:19:11.414Z"}, "title": "IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Langflow Desktop", "versions": [{"status": "affected", "version": "1.6.0", "lessThanOrEqual": "1.8.2", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7268428", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer\u00a0 https://www.langflow.org/blog/langflow-1-8-desktop \n\nIf you are already using Langflow Desktop, upgrade in the application to version 1.8.3\n\nTo install Langflow Desktop for the first time, visit Download Langflow Desktop https://langflow.org/desktop .", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer <a href=\"https://www.langflow.org/blog/langflow-1-8-desktop\" rel=\"nofollow\">https://www.langflow.org/blog/langflow-1-8-desktop</a></p><p>If you are already using Langflow Desktop, upgrade in the application to version 1.8.3</p><p>To install Langflow Desktop for the first time, visit <a href=\"https://langflow.org/desktop\" rel=\"nofollow\">Download Langflow Desktop</a>.</p>"}]}], "x_generator": {"engine": "ibm-cvegen"}, "credits": [{"lang": "en", "value": "This vulnerability was reported to IBM by Weblover.", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-08T15:41:44.331099Z", "id": "CVE-2026-3357", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T15:41:55.112Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3357", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-08T15:41:44.331099Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T15:41:50.528Z"}}], "cna": {"title": "IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file", "credits": [{"lang": "en", "type": "finder", "value": "This vulnerability was reported to IBM by Weblover."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Langflow Desktop", "versions": [{"status": "affected", "version": "1.6.0", "versionType": "semver", "lessThanOrEqual": "1.8.2"}]}], "solutions": [{"lang": "en", "value": "IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer\u00a0 https://www.langflow.org/blog/langflow-1-8-desktop \n\nIf you are already using Langflow Desktop, upgrade in the application to version 1.8.3\n\nTo install Langflow Desktop for the first time, visit Download Langflow Desktop https://langflow.org/desktop .", "supportingMedia": [{"type": "text/html", "value": "<p>IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer <a href=\"https://www.langflow.org/blog/langflow-1-8-desktop\" rel=\"nofollow\">https://www.langflow.org/blog/langflow-1-8-desktop</a></p><p>If you are already using Langflow Desktop, upgrade in the application to version 1.8.3</p><p>To install Langflow Desktop for the first time, visit <a href=\"https://langflow.org/desktop\" rel=\"nofollow\">Download Langflow Desktop</a>.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7268428", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-08T00:19:11.414Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3357", "state": "PUBLISHED", "dateUpdated": "2026-04-08T15:41:55.112Z", "dateReserved": "2026-02-27T18:17:58.431Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-04-08T00:19:11.414Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}