Skip to content
IBMCVE-2026-8635

IBM Langflow OSS: privilege escalation

Critical9.9CVE-2026-8635 · Published Jul 17, 2026 · updated Jul 23, 2026

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

IBM advisory

Affected versions

PackageAffectedFixed in
Langflow OSS
Product
>= 1.0.0, <= 1.10.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-94

More IBM advisories

All IBM
Advisory
IBM Langflow OSS: insecure direct object reference
High8.1Jul 17
IBM Langflow OSS: hard-coded credentials
Critical9.8Jul 17
IBM Langflow OSS: remote code execution
Critical9.8Jul 17
IBM Langflow OSS: improper input validation
Critical9.9Jul 17
IBM Security Verify Access: information disclosure
Medium5.3Jul 17
IBM Langflow OSS: remote code execution
High8.8Jul 17

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.