{"id":"CVE-2026-3357","state":"PUBLISHED","title":"IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file","description":"IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.","publishedAt":"2026-04-08T00:19:11.414Z","updatedAt":"2026-04-08T15:41:55.112Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"ibm"},"assigner":"ibm","products":["IBM Langflow Desktop"],"affected":[{"vendor":"IBM","product":"Langflow Desktop","versions":[{"version":"1.6.0","status":"affected","lessThanOrEqual":"1.8.2","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7268428"],"weaknesses":["CWE-502"],"ingestedAt":"2026-10-29T20:11:50.837Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/3xxx/CVE-2026-3357.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-3357","state":"PUBLISHED","datePublished":"2026-04-08T00:19:11.414Z","dateUpdated":"2026-04-08T15:41:55.112Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2026-02-27T18:17:58.431Z"},"containers":{"cna":{"title":"IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file","descriptions":[{"lang":"en","value":"IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component."}],"affected":[{"vendor":"IBM","product":"Langflow Desktop","versions":[{"version":"1.6.0","status":"affected","lessThanOrEqual":"1.8.2","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7268428","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-502","lang":"en","description":"CWE-502 Deserialization of Untrusted Data","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-04-08T00:19:11.414Z"},"solutions":[{"lang":"en","value":"IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer  https://www.langflow.org/blog/langflow-1-8-desktop \n\nIf you are already using Langflow Desktop, upgrade in the application to version 1.8.3\n\nTo install Langflow Desktop for the first time, visit  Download Langflow Desktop https://langflow.org/desktop .","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>IBM recommends addressing the vulnerability now by upgrading to IBM Langflow Desktop 1.8.3 or newer&nbsp;<a href=\"https://www.langflow.org/blog/langflow-1-8-desktop\" rel=\"nofollow\">https://www.langflow.org/blog/langflow-1-8-desktop</a></p><p>If you are already using Langflow Desktop, upgrade in the application to version 1.8.3</p><p>To install Langflow Desktop for the first time, visit <a href=\"https://langflow.org/desktop\" rel=\"nofollow\">Download Langflow Desktop</a>.</p>"}]}],"x_generator":{"engine":"ibm-cvegen"},"credits":[{"lang":"en","value":"This vulnerability was reported to IBM by Weblover.","type":"finder"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-08T15:41:44.331099Z","id":"CVE-2026-3357","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-08T15:41:55.112Z"}}]}}}