CVE-2026-8481
IBM Langflow OSS 1.0.0 through 1.10.0 contains a critical remote code execution vulnerability in its code validation API. The POST /api/v1/validate/code endpoint runs user‑supplied Python code via exec() without sandboxing or validation, allowing any authenticated user to execute arbitrary system commands with the server’s privileges. No official fix is mentioned in the provided sources.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users of IBM Langflow OSS versions 1.0.0 to 1.10.0
Real-world impact
An authenticated attacker can run arbitrary commands on the host, potentially leading to full system compromise.
Why this severity
CVSS base score 9.9 (Critical) due to network‑adjacent attack vector, low attack complexity, low privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability.
What to do about it
- 01No official fix is available in the provided sources.
- ›Restrict access to the /api/v1/validate/code endpoint to trusted users only.
- ›Monitor and audit API usage for unexpected code execution attempts.
Remediation guidance is based solely on the provided data; no vendor patch or CISA KEV action is referenced.
Timeline
- Jul 17, 2026 · 16d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 23, 2026 · 10d agoAdvisory updatedThe NVD record was last revised.
How it’s attacked
References & advisories
- ibm.com/support/pages/node/7278923vendor advisory