CVE-2026-8476 | IBM Langflow up to 1.10.0 AsyncDiskCache pickle.loads deserialization

July 17, 2026 Yanac

A vulnerability has been found in IBM Langflow up to 1.10.0 and classified as critical. The impacted element is the function pickle.loads of the component AsyncDiskCache. The manipulation leads to deserialization.

This vulnerability is documented as CVE-2026-8476. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More