EXPOSURES › CVE-2026-8635
CVE-2026-8635
CRITICAL
DETAIL
SourceNVD · cve
Published2026-07-17
CVSS9.9
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-8635 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.