What is the CVSS score of CVE-2026-17630?

CVE-2026-17630 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of IBM Langflow OSS are affected by CVE-2026-17630?

Remote code execution vulnerability in IBM Langflow OSS (versions 1.0.0-1.10.3) enables authenticated attackers to bypass input validation and execute arbitrary commands through configuration…. A patch is available.

How to fix or mitigate CVE-2026-17630?

Within 24 hours, inventory all systems running IBM Langflow OSS versions 1.0.0 through 1.10.3 and assess whether they are accessible to untrusted authenticated users. Within 7 days, apply the vendor-released patch to all identified instances and verify successful deployment. Within 30 days, implement network-level access controls limiting Langflow authentication to trusted identity sources and deploy monitoring for anomalous configuration changes indicative of exploitation attempts.

IBM Langflow OSS CVE-2026-17630

EUVD-2026-53477 HIGH

Incomplete List of Disallowed Inputs (CWE-184)

2026-08-05 ibm

GHSA-5jpf-5j69-486q

RCE IBM Langflow Oss

8.8

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-accessible configuration interface with low-privilege authentication aligns with AV:N/PR:L; full C/I/A impact reflects arbitrary code execution capability on the host system.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Aug 06, 2026 - 19:47 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 06, 2026 - 19:37 vuln.today

cvss_changed

CVSS changed

Aug 06, 2026 - 19:37 NVD

7.2 (HIGH) 8.8 (HIGH)

Analysis Generated

Aug 05, 2026 - 17:32 vuln.today

CVE Published

Aug 05, 2026 - 16:33 nvd

HIGH 7.2

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters.

AnalysisAI

Remote code execution in IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated remote attackers to run arbitrary commands by supplying crafted configuration parameters that bypass the application's incomplete input denylist (CWE-184). The flaw carries a CVSS 8.8 score with full confidentiality, integrity, and availability impact, and SSVC rates the technical impact as total. No active exploitation is confirmed - EPSS sits at 0.42% (35th percentile) and the vulnerability is absent from CISA KEV - though the low attack complexity makes it a genuine priority for any internet-exposed Langflow deployment with untrusted authenticated users.

Technical ContextAI

IBM Langflow OSS is an open-source workflow orchestration platform built on LangChain, enabling users to construct and configure AI/LLM pipelines through a web interface. Because the platform accepts user-supplied parameters to configure workflow components, code execution engines, and external integrations, input validation is security-critical. The root cause is CWE-184 (Incomplete List of Disallowed Inputs): the application enforces a denylist approach to block dangerous configuration parameter values, but the list fails to enumerate all hazardous inputs, allowing crafted values to reach code execution pathways. Denylist-based validation is inherently fragile against encoding, alternate representations, and unforeseen input classes - a structural weakness that allowlist validation would eliminate. The CPE string cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:* covers all IBM Langflow OSS releases from 1.0.0 through 1.10.3 inclusive.

RemediationAI

The primary fix is to apply the IBM-released patch; consult the vendor advisory at https://www.ibm.com/support/pages/node/7282147 for the exact target version and upgrade instructions, as a specific fixed version number was not independently confirmed from the available intelligence data. As compensating controls pending patching: restrict access to the Langflow OSS web interface to known, trusted authenticated users only and enforce network-layer controls such as firewall rules or VPN requirements to block untrusted network access to Langflow endpoints - this directly addresses the AV:N/PR:L attack surface. Disabling or restricting configuration parameter input surfaces for non-administrative authenticated accounts reduces exposure but will limit workflow authoring functionality. Audit existing Langflow configurations for unexpected or externally-influenced parameter values that may indicate prior exploitation attempts.