CVE-2026-8635
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
IBM Langflow OSS versions 1.0.0 through 1.10.0 allow authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
Risk Assessment
An attacker can fully compromise the Langflow server, gaining access to all data and the ability to perform arbitrary actions.
Recommendation
Immediately upgrade IBM Langflow OSS to a version later than 1.10.0 if available, or apply available security patches.
Original NVD description (English source)
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.