← Back to CVE search

CVE-2026-8635

IBM Langflow OSS

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

CVSS 9.9EPSS 0.301%Risk 1.02
View source
Published
2026-07-17 20:17:31
Affected versions
<=1.10.0
Type
Critical software
Last modified
2026-07-23 05:16:39
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Operating systems
Windows; MacOS; Linux