CVE-2026-3357

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component...

CVE-2026-3357

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component...

CVE-2026-3357

IBM Langflow Desktop 1.6.0–1.8.2 contains a deserialization flaw in its FAISS Vector Store component that allows an authenticated user to achieve arbitrary code execution by uploading a crafted Python Pickle file. The vulnerability stems from unsafe default behavior that loads untrusted data, gra...