High severity · published Apr 8, 2026
CVE-2026-3357
IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LD
Langflow Desktop · IBM
1.6.0 through 1.8.2 · source: vendor
LA
Langflow · Langflow
1.6.0 before 1.8.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-3357
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-3357
Vendor Advisory
https://www.ibm.com/support/pages/node/7268428
More from Langflow Desktop
8.8
CVE-2026-6543
Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
7.5
CVE-2026-4503
Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
6.5
CVE-2026-3345
Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint
6.5
CVE-2026-3340
Server-Side Request Forgery (SSRF) in Langflow URL Component
6.5
CVE-2026-4502
Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API