CVE-2026-8635
published 2026-07-17CVE-2026-8635: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary…
PriorityP267critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.53%
42.8th percentile
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | langflow_oss | 1.0.0 – 1.10.0 | — |
| langflow | langflow | >= 1.0.0 < 1.10.1 | 1.10.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Langflow up to 1.10.0 Langflow service permission
vuldb·2026-07-18·CVSS 9.9
CVE-2026-8635 [CRITICAL] IBM Langflow up to 1.10.0 Langflow service permission
A vulnerability, which was classified as very critical, was found in IBM Langflow up to 1.10.0. This impacts an unknown function of the component Langflow service. The manipulation results in permission issues.
This vulnerability is cataloged as CVE-2026-8635. The attack may be launched remotely. There is no exploit available.
GHSA
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system c
ghsa_unreviewed·2026-07-17
CVE-2026-8635 [CRITICAL] CWE-94 IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system c
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
No detection rules found.
No public exploits indexed.
2026-07-17
Published