Critical severity9.9NVD Advisory· Published Jul 17, 2026· Updated Jul 23, 2026

CVE-2026-8635

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

Affected products

Langflow AI/Langflow
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Range: >=1.0.0,<1.10.1
IBM/Langflow OSSllm-fuzzy
Range: 1.0.0 - 1.10.0

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7278925nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000