CVE-2026-8481

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec() function without sandboxing, input validation, or privilege restrictions, enabling any authenticated user to execute arbitrary system commands with the full privileges of the Langflow server process.

Score
CVSS 3.1 9.9 Critical
Status
Analyzed - psirt@us.ibm.com
Published
2026-07-17
Last modified
2026-10-24
Weaknesses
CWE-94

Affected products

References

 
 
© AVABIS GmbH privacypolicy about