What is the CVSS score of CVE-2026-17624?

CVE-2026-17624 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of IBM Langflow OSS are affected by CVE-2026-17624?

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a critical remote code execution vulnerability that allows any authenticated user to execute arbitrary code on affected systems.. A patch is available.

How to fix or mitigate CVE-2026-17624?

Within 24 hours, conduct an inventory scan to identify all IBM Langflow OSS instances in your environment and document which versions are deployed; apply network segmentation or access restrictions to limit exposure. Within 7 days, apply the vendor-released patch to upgrade all instances to a patched version; schedule coordinated maintenance windows with application owners to minimize disruption. Within 30 days, verify patch deployment across all systems through automated version attestation, review authentication logs for anomalous access patterns during the vulnerability window, and update your vulnerability registry with closure evidence.

IBM Langflow OSS CVE-2026-17624

EUVD-2026-53578 HIGH

Code Injection (CWE-94)

2026-08-05 ibm

GHSA-mqwf-65qp-wvg5

RCE IBM Code Injection Langflow Oss

8.8

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable with low complexity; PR:L confirmed because any authenticated user can trigger the import path; full C/I/A impact from arbitrary code execution.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Aug 06, 2026 - 19:43 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 06, 2026 - 19:37 vuln.today

cvss_changed

CVSS changed

Aug 06, 2026 - 19:37 NVD

8.5 (HIGH) 8.8 (HIGH)

Analysis Generated

Aug 05, 2026 - 19:34 vuln.today

CVE Published

Aug 05, 2026 - 18:34 nvd

HIGH 8.5

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of module imports.

AnalysisAI

Remote code execution in IBM Langflow OSS 1.0.0 through 1.10.3 is achievable by any authenticated attacker due to improper validation of module imports, classified under CWE-94 (Code Injection). The CVSS 8.8 score reflects full confidentiality, integrity, and availability impact with no user interaction required beyond low-privilege authentication. No public exploit code has been identified at time of analysis, EPSS sits at 0.34% (27th percentile), and SSVC designates exploitation as 'none' currently - though the SSVC technical impact is rated 'total', confirming the severity of successful exploitation.

Technical ContextAI

Langflow OSS is an open-source visual framework for building LangChain-based AI workflows, which IBM distributes as 'IBM Langflow OSS'. The affected CPE is cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:* covering all versions 1.0.0 through 1.10.3. The root cause is CWE-94 (Improper Control of Generation of Code - Code Injection), specifically arising from insufficient validation of module imports. In Python-based AI workflow tools like Langflow, users can define custom components or pipelines that reference Python modules; if the server-side import resolution does not sanitize or allowlist module names, an attacker can supply a crafted module path that causes the Python interpreter to load and execute arbitrary code. This class of vulnerability is particularly dangerous in AI tooling platforms where dynamic code loading is a core architectural feature.

RemediationAI

Upgrade IBM Langflow OSS to a version beyond 1.10.3, per the vendor patch available at https://www.ibm.com/support/pages/node/7282646. The exact patched release version is not independently confirmed from the available data - consult the IBM advisory directly to identify the minimum safe release. As a compensating control while patching, restrict access to the Langflow instance to trusted, known-good users only, leveraging network-layer controls (firewall, VPN, or reverse proxy authentication) to prevent opportunistic access by low-privilege accounts that could abuse the import injection path. Disabling any Langflow features or API endpoints that accept user-defined module paths, if configurable, would reduce the attack surface; however, module import handling appears to be a core feature rather than optional, limiting the effectiveness of this workaround without degrading functionality.