Auth Escalation & RCE in IBM Langflow OSS 1.0.0-1.10.0
CVE-2026-8635 Published on July 17, 2026
Arbitrary Code Execution in Python Interpreter Component
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
Vulnerability Analysis
CVE-2026-8635 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
What is a Code Injection Vulnerability?
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CVE-2026-8635 has been classified to as a Code Injection vulnerability or weakness.
Products Associated with CVE-2026-8635
Want to know whenever a new CVE is published for IBM Langflow Oss? stack.watch will email you.
Affected Versions
IBM Langflow OSS:- Version 1.0.0, <= 1.10.0 is affected.