Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

IBM Langflow: Remote Code Execution via User-Submitted Code

CVE-2026-8481 · published 2 months ago
Summary

IBM Langflow's code validation API allows users to execute their own Python code, potentially running malicious system commands with the server's full privileges. This affects versions 1.0.0 through 1.10.0. To mitigate, update to a fixed version of IBM Langflow or disable the code validation API endpoint if not in use.

What to do
  • Update langflow langflow to version 1.10.1 or later.
Affected software
VendorProductAffected versions
ibm langflow oss <= 1.10.0
langflow langflow >= 1.0.0, < 1.10.1
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Original advisory text
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Pytho...
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec() function without sandboxing, input validation, or privilege restrictions, enabling any authenticated user to execute arbitrary system commands with the full privileges of the Langflow server process.
References
Severity
9.9 Critical
CVSS 3.1: 9.9 (NVD)
Exploitation
EPSS <1%
Type
CWE-94Code Injection
Timeline
Published17 Jul 2026
Updated25 Sep 2026
First seen17 Jul 2026
Sources
CVE-2026-8481 · NVD
CVE-2026-8481 · MITRE
Track software like this
Free during beta