CVE-2026-8635 — Arbitrary Code Execution in Python Interpreter Component

CVE-2026-8635

Arbitrary Code Execution in Python Interpreter Component PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.0

CWE

CWE-94

References

https://www.ibm.com/support/pages/node/7278925

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.