VYPR
Get started
← All advisories
High severity8.8NVD Advisory· Published Apr 8, 2026· Updated Apr 14, 2026

CVE-2026-3357

CVE-2026-3357

Description

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.

Affected products

1
  • Langflow/Langflow
    cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
    Range: >=1.6.0,<1.8.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

5