Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-8481: IBM Langflow: Remote Code Execution via User-Submitted Code
CVE-2026-8481
CVE-2026-8481
Summary
IBM Langflow's code validation API allows users to execute their own Python code, potentially running malicious system commands with the server's full privileges. This affects versions 1.0.0 through 1.10.0. To mitigate, update to a fixed version of IBM Langflow or disable the code validation API endpoint if not in use.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | langflow oss | <= 1.10.0 |
Original title
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Pytho...
Original description
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec() function without sandboxing, input validation, or privilege restrictions, enabling any authenticated user to execute arbitrary system commands with the full privileges of the Langflow server process.
nvd CVSS3.1
9.9
Vulnerability type
CWE-94
Code Injection
Published: 17 Jul 2026 · Updated: 20 Jul 2026 · First seen: 17 Jul 2026