CVE-2026-8635

CRITICAL CVSS 9.9 View on NVD ↗

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://www.ibm.com/support/pages/node/7278925

Published: Jul 17, 2026 20:17 UTC Modified: Jul 17, 2026 20:17 UTC