2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:langflow_desktop:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:langflow_desktop:1.8.2:*:*:*:*:*:*:*"],"product":"Langflow Desktop","vendor":"IBM","versions":[{"lessThanOrEqual":"1.8.2","status":"affected","version":"1.6.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*","matchCriteriaId":"FB101015-F52D-4FE2-BBED-2CFC46ABF673","versionEndExcluding":"1.8.3","versionStartIncluding":"1.6.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component."},{"lang":"es","value":"IBM Langflow Desktop 1.6.0 hasta 1.8.2 Langflow podría permitir a un usuario autenticado ejecutar código arbitrario en el sistema, causado por una configuración predeterminada insegura que permite la deserialización de datos no confiables en el componente FAISS."}],"id":"CVE-2026-3357","lastModified":"2026-07-24T23:10:00.563","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3357","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-08T15:41:44.331099Z","version":"2.0.3"}}]},"published":"2026-04-08T01:16:41.057","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7268428"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|