What is the CVSS score of CVE-2026-8481?

CVE-2026-8481 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Python are affected by CVE-2026-8481?

IBM Langflow OSS versions 1.0.0-1.10.0 contain a critical remote code execution vulnerability (CVE-2026-8481, CVSS 9.9) allowing any authenticated user to execute arbitrary code on the server…. A patch is available.

How to fix or mitigate CVE-2026-8481?

Within 24 hours, identify all IBM Langflow OSS deployments and determine which versions are running to establish your exposure scope. Within 7 days, apply the available vendor patch to all affected instances (versions 1.0.0-1.10.0) per IBM's advisory, prioritizing production environments and verifying successful remediation. Within 30 days, audit authentication logs for potential exploitation activity, restrict Langflow access to authorized personnel only, and establish network segmentation to limit lateral movement from compromised systems.

Python CVE-2026-8481

EUVD-2026-45275 CRITICAL

Code Injection (CWE-94)

2026-07-17 ibm

GHSA-6jrp-2cpp-fpm4

Code Injection IBM RCE Python Langflow Oss

9.9

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from Vendor (ibm) · only source for this CVE.

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 17, 2026 - 19:47 vuln.today

CVE Published

Jul 17, 2026 - 19:10 cve.org

CRITICAL 9.9

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec() function without sandboxing, input validation, or privilege restrictions, enabling any authenticated user to execute arbitrary system commands with the full privileges of the Langflow server process.

Articles & Coverage 1

News Critical RCE in IBM Langflow OSS 1.0.0-1.10.0 via Code Validation - CVE-2026-8481 Jul 18, 2026

AnalysisAI

Authenticated remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 lets any logged-in user run arbitrary Python — and therefore arbitrary OS commands — with the privileges of the Langflow server process. The flaw is a design failure in the POST /api/v1/validate/code endpoint, which passes user-supplied code straight into Python's exec() with no sandbox, validation, or privilege drop. Rated CVSS 9.9 by IBM; no public exploit identified at time of analysis, though the trivial exec()-based trigger makes exploitation straightforward once authenticated.