What is the CVSS score of CVE-2026-8635?

CVE-2026-8635 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Which versions of IBM Langflow OSS are affected by CVE-2026-8635?

IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a critical flaw allowing authenticated users to elevate themselves to administrator level and run unrestricted commands on the server, resulting…. A patch is available.

How to fix or mitigate CVE-2026-8635?

Within 24 hours, identify and inventory all systems running IBM Langflow OSS versions 1.0.0 through 1.10.0, and apply the vendor-released patch immediately to all instances; if immediate patching is not possible, isolate affected systems from production networks and restrict access to the most trusted administrators only. Within 7 days, confirm patch deployment across all Langflow deployments, review system and database logs from the preceding 30 days for evidence of unauthorized privilege escalation or command execution, and revoke access for any suspicious accounts. Within 30 days, perform a comprehensive security assessment of the patched environment, enforce principle-of-least-privilege controls on the Langflow service account, and establish real-time monitoring for privilege escalation attempts.

IBM Langflow OSS CVE-2026-8635

CRITICAL

Code Injection (CWE-94)

2026-07-17 ibm

Code Injection IBM RCE Langflow Oss

9.9

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

CRITICAL

qualitative

NVD

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

Network-reachable service exploitable by any authenticated user (PR:L), no interaction, and DB-manipulation-to-RCE breaks out of the app context (S:C) with full confidentiality, integrity, and availability loss.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (ibm).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 17, 2026 - 19:45 vuln.today

CVE Published

Jul 17, 2026 - 19:02 cve.org

CRITICAL 9.9

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

AnalysisAI

Privilege escalation to remote code execution in IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated user to elevate their account to superuser by directly manipulating the underlying database, then execute arbitrary system commands and achieve full compromise of the host running the Langflow service. The flaw (CWE-94, code injection) carries a critical CVSS 9.9 with a scope change, meaning code runs with the Langflow service account's permissions beyond the vulnerable component. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate with low-privileged account

Delivery

Manipulate database to set superuser role

Exploit

Escalate to superuser context

Execution

Invoke code execution component

Persist

Execute arbitrary system commands

Impact

Full host compromise as service account

Access

Authenticate with low-privileged account

Delivery

Manipulate database to set superuser role

Exploit

Escalate to superuser context

Execution

Invoke code execution component

Persist

Execute arbitrary system commands

Impact

Full host compromise as service account

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated Langflow account (CVSS PR:L) with network reachability to the Langflow OSS 1.0.0-1.10.0 web service (AV:N); no user interaction and low complexity are needed once that access is held. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) is internally consistent with the description: network reachable, low complexity, requires low (authenticated) privileges, no user interaction, scope change, and full CHI impact - yielding a critical 9.9. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker who holds or obtains any low-privileged Langflow account authenticates to the platform, then directly manipulates the backing database to promote their account to superuser. With superuser role they invoke Langflow's code/command execution capability to run arbitrary system commands, gaining a shell with the Langflow service account's permissions and full control of the host. …
Remediation	Patch available per vendor advisory - apply the fixed release referenced in IBM's advisory at https://www.ibm.com/support/pages/node/7278925; the input does not include an exact fixed version number, so confirm the target build from that advisory before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify and inventory all systems running IBM Langflow OSS versions 1.0.0 through 1.10.0, and apply the vendor-released patch immediately to all instances; if immediate patching is not possible, isolate affected systems from production networks and restrict access to the most trusted administrators only. …

Threat intelligence, references, and detailed analysis are available after sign-in.