PT-2026-31055 · Ibm · Langflow Desktop

Published 2026-04-08 · Updated 2026-04-08 · CVE-2026-3357

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-3357

Affected Products

Langflow Desktop

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-3357 · Security Note
• https://ibm.com/support/pages/node/7268428 · Patch, Vendor Advisory