CVE-2026-3357 — IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file
IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits …
Published: 2026-04-08 · CVSS: 8.8 · CVSS 3.1
IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7