What is the CVSS score of EUVD-2026-53555?

EUVD-2026-53555 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of IBM Langflow OSS are affected by EUVD-2026-53555?

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a remote code execution vulnerability that allows authenticated users to inject and execute arbitrary code on the server.. A patch is available.

How to fix or mitigate EUVD-2026-53555?

Within 24 hours, identify and inventory all systems running IBM Langflow OSS versions 1.0.0-1.10.3, and assess exposure to untrusted or external users. Within 7 days, upgrade all affected instances to version 1.10.4 or later, prioritizing production systems and those with widest user access. Within 30 days, complete deployment verification, confirm upgrades in logs, and enforce least-privilege access by restricting Langflow user accounts to trusted personnel only.

IBM Langflow OSS EUVD-2026-53555

| CVE-2026-8478 HIGH

Code Injection (CWE-94)

2026-08-05 ibm

GHSA-x252-wm2h-6mf4

RCE IBM Code Injection Langflow Oss

8.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable web application; low-privilege account required to reach code execution surface; injection yields full CIA impact with no user interaction needed.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 05, 2026 - 18:48 vuln.today

CVE Published

Aug 05, 2026 - 18:24 cve.org

HIGH 8.8

DescriptionCVE.org

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

AnalysisAI

Remote code injection in IBM Langflow OSS 1.0.0 through 1.10.3 allows an authenticated remote attacker to execute arbitrary code on the underlying server by supplying malicious input through user-controlled code fields within the platform. The CVSS vector (AV:N/AC:L/PR:L) confirms the attack is network-reachable at low complexity, requiring only low-privilege credentials, with full confidentiality, integrity, and availability impact on the host. A vendor patch is available; no public exploit or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

IBM Langflow OSS is an open-source, low-code/no-code AI workflow builder that allows users to compose and execute data pipelines involving LLMs and Python-based components. Its core architecture accepts user-defined code blocks - such as custom Python component logic - and evaluates them server-side. CWE-94 (Improper Control of Generation of Code) identifies the root cause: user-supplied input is passed to a code execution context without adequate sanitization, sandboxing, or allowlisting, allowing the injected code to run in the application's server environment. The affected CPE is cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:*, covering versions 1.0.0 through 1.10.3.

RemediationAI

Apply the vendor-released patch per the IBM security advisory at https://www.ibm.com/support/pages/node/7282646. The exact fix version is not specified in the available intelligence and must be confirmed from the advisory before upgrading. As compensating controls while patching is pending, restrict Langflow access to the minimum set of trusted users by enforcing strong authentication and removing or disabling accounts that do not need code-authoring capability; this directly reduces the PR:L attack surface. Additionally, isolate the Langflow service behind a network boundary (VPN or internal-only access) to prevent internet-facing exposure, reducing AV:N exploitability. Note that restricting network access does not remediate the underlying injection flaw and must not substitute for patching.