CVE-2026-3357

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3357", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-02-27T18:17:58.431Z", "datePublished": "2026-04-08T00:19:11.414Z", "dateUpdated": "2026-04-08T15:41:55.112Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-08T00:19:11.414Z"}, "title": "IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Langflow Desktop", "versions": [{"status": "affected", "version": "1.6.0", "lessThanOrEqual": "1.8.2", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7268428", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer\u00a0 https://www.langflow.org/blog/langflow-1-8-desktop \n\nIf you are already using Langflow Desktop, upgrade in the application to version 1.8.3\n\nTo install Langflow Desktop for the first time, visit Download Langflow Desktop https://langflow.org/desktop .", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer&nbsp;<a href=\"https://www.langflow.org/blog/langflow-1-8-desktop\" rel=\"nofollow\">https://www.langflow.org/blog/langflow-1-8-desktop</a></p><p>If you are already using Langflow Desktop, upgrade in the application to version 1.8.3</p><p>To install Langflow Desktop for the first time, visit <a href=\"https://langflow.org/desktop\" rel=\"nofollow\">Download Langflow Desktop</a>.</p>"}]}], "x_generator": {"engine": "ibm-cvegen"}, "credits": [{"lang": "en", "value": "This vulnerability was reported to IBM by Weblover.", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-08T15:41:44.331099Z", "id": "CVE-2026-3357", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T15:41:55.112Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3357", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-08T15:41:44.331099Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T15:41:50.528Z"}}], "cna": {"title": "IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file", "credits": [{"lang": "en", "type": "finder", "value": "This vulnerability was reported to IBM by Weblover."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Langflow Desktop", "versions": [{"status": "affected", "version": "1.6.0", "versionType": "semver", "lessThanOrEqual": "1.8.2"}]}], "solutions": [{"lang": "en", "value": "IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer\u00a0 https://www.langflow.org/blog/langflow-1-8-desktop \n\nIf you are already using Langflow Desktop, upgrade in the application to version 1.8.3\n\nTo install Langflow Desktop for the first time, visit Download Langflow Desktop https://langflow.org/desktop .", "supportingMedia": [{"type": "text/html", "value": "<p>IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer&nbsp;<a href=\"https://www.langflow.org/blog/langflow-1-8-desktop\" rel=\"nofollow\">https://www.langflow.org/blog/langflow-1-8-desktop</a></p><p>If you are already using Langflow Desktop, upgrade in the application to version 1.8.3</p><p>To install Langflow Desktop for the first time, visit <a href=\"https://langflow.org/desktop\" rel=\"nofollow\">Download Langflow Desktop</a>.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7268428", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-08T00:19:11.414Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3357", "state": "PUBLISHED", "dateUpdated": "2026-04-08T15:41:55.112Z", "dateReserved": "2026-02-27T18:17:58.431Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-04-08T00:19:11.414Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"], "product": "Langflow Desktop", "vendor": "IBM", "versions": [{"lessThanOrEqual": "1.8.2", "status": "affected", "version": "1.6.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*", "matchCriteriaId": "FB101015-F52D-4FE2-BBED-2CFC46ABF673", "versionEndExcluding": "1.8.3", "versionStartIncluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component."}, {"lang": "es", "value": "IBM Langflow Desktop 1.6.0 hasta 1.8.2 Langflow podr\u00eda permitir a un usuario autenticado ejecutar c\u00f3digo arbitrario en el sistema, causado por una configuraci\u00f3n predeterminada insegura que permite la deserializaci\u00f3n de datos no confiables en el componente FAISS."}], "id": "CVE-2026-3357", "lastModified": "2026-07-24T23:10:00.563", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3357", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-08T15:41:44.331099Z", "version": "2.0.3"}}]}, "published": "2026-04-08T01:16:41.057", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7268428"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.6.0,1.8.2]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Langflow Desktop", "source": "cna", "vendor": "IBM"}, "product": "langflow_desktop", "vendor": "ibm"}], "analysis": {"en": {"generated_at": "2026-04-08T02:24:40.690756+00:00", "value": {"mitigation_remediation": ["Upgrade IBM Langflow Desktop to version 1.8.3 or newer following the vendor\u2019s instructions.", "If an immediate upgrade is not possible, disable or restrict the FAISS component\u2019s ability to deserialize untrusted pickle data, or remove any custom vectors that may contain malicious files.", "Ensure only trusted users have access to the application and that no untrusted data is imported.", "Regularly check IBM\u2019s security advisories and apply any newer patches promptly."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "IBM Langflow Desktop versions from 1.6.0 through 1.8.2 are affected. Users running any of these releases are susceptible until a patch is applied.", "description_and_impact": "The vulnerability resides in IBM Langflow Desktop\u2019s FAISS vector store, where an insecure default setting permits an authenticated user to deserialize untrusted pickle data. This flaw enables arbitrary code execution on the host machine, allowing an attacker full control over the system. The weakness is identified as deserialization of untrusted data (CWE\u2011502), giving the attacker potential damage to confidentiality, integrity, and availability of the entire system.", "risk_and_exploitability": "The CVSS score is 8.8, indicating high severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires an authenticated user to supply a malicious pickle file to the FAISS component, which then executes code with application privileges. Because the flaw is a result of a default configuration rather than complex exploitation, the possibility of exploitation is considered high if the vulnerable application is accessible to legitimate users."}}}}, "created": "2026-04-08T19:33:42.087205+00:00", "updated": "2026-04-08T19:44:28.218411+00:00", "vendors": ["ibm", "ibm$PRODUCT$langflow_desktop"]}