What is the CVSS score of EUVD-2026-53520?

EUVD-2026-53520 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.8%.

Which versions of IBM Langflow OSS are affected by EUVD-2026-53520?

IBM Langflow OSS versions 1.0.0 through 1.10.3 allow authenticated users to gain complete system control through a command injection flaw, putting data, system integrity, and service availability at…. A patch is available.

How to fix or mitigate EUVD-2026-53520?

Within 24 hours: Identify and inventory all deployments of IBM Langflow OSS versions 1.0.0 through 1.10.3 and restrict administrative access to vetted personnel only. Within 7 days: Apply the vendor-released patch by upgrading all affected IBM Langflow instances to a patched version per vendor advisory. Within 30 days: Audit Langflow audit logs and system command histories to verify no unauthorized command execution occurred, and implement restrictive access controls limiting Langflow user capabilities to deployed workflow automation only.

IBM Langflow OSS EUVD-2026-53520

| CVE-2026-17625 HIGH

OS Command Injection (CWE-78)

2026-08-05 ibm

GHSA-qvrp-rpmf-prw4

Command Injection IBM Langflow Oss

8.8

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-delivered command injection requiring only low-privilege login; full C/I/A impact; no scope change as compromise stays within application boundary.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Aug 06, 2026 - 19:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 06, 2026 - 19:22 vuln.today

cvss_changed

CVSS changed

Aug 06, 2026 - 19:22 NVD

7.2 (HIGH) 8.8 (HIGH)

Analysis Generated

Aug 05, 2026 - 17:50 vuln.today

CVE Published

Aug 05, 2026 - 17:17 cve.org

HIGH 7.2

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

AnalysisAI

OS command injection in IBM Langflow OSS 1.0.0 through 1.10.3 enables remote authenticated attackers to execute arbitrary system commands on the underlying server. The flaw stems from insufficient sanitization of user-supplied input passed to OS-level command execution routines (CWE-78), granting full system-level access with a single authenticated request. No public exploit code has been identified at time of analysis, and CISA does not list this in KEV, though CVSS-assessed technical impact is total across confidentiality, integrity, and availability.

Technical ContextAI

IBM Langflow OSS is IBM's distribution of the Langflow visual AI workflow platform, which allows users to construct and orchestrate LLM-based pipelines through a web interface. CWE-78 (Improper Neutralization of Special Elements used in an OS Command) indicates that user-controlled input is being interpolated into OS command strings without adequate escaping or allowlisting, enabling shell metacharacter injection. The CPE string cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:* confirms IBM's distinct packaging of the product. Given Langflow's architecture - which involves executing external tools, scripts, and integrations as part of workflow nodes - OS command execution is an inherent product capability, making unsanitized input in these code paths a high-severity trust boundary violation.

RemediationAI

Apply the vendor-released patch as documented in IBM's advisory at https://www.ibm.com/support/pages/node/7282147 - the patch is confirmed available from IBM but the exact fixed version number is not specified in the available intelligence and should be confirmed directly from that advisory before upgrading. Until patching is feasible, restrict access to the Langflow OSS interface to trusted, internal networks only, eliminating the network attack vector for external actors. Enforce strict role-based access control to limit which authenticated users can interact with workflow nodes that invoke external commands or tools, as this reduces the population of principals who could trigger the vulnerable code paths. Monitoring OS process creation events spawned from the Langflow application process can serve as a detective control for exploitation attempts.