CVE-2026-8635— Arbitrary Code Execution in Python Interpreter Component
Possible ATT&CK Techniques 3AI
T1546 · Event Triggered Execution T1059 · Command and Scripting Interpreter T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Langflow OSS | 1.0.0≤ 1.10.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8635
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary Code Execution in Python Interpreter Component
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Vulnerability Title
IBM Langflow OSS 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Langflow OSS是美国IBM公司的一个开源的低代码可视化AI工作流构建工具，它让开发者能通过拖拽组件的方式快速搭建、部署和迭代AI智能体与RAG应用，同时支持用Python进行深度定制以集成企业系统。 IBM Langflow OSS 1.0.0版本至1.10.0版本存在代码注入漏洞，该漏洞源于直接操作数据库，可能导致经过身份验证的用户将权限提升到超级用户，执行任意系统命令，并实现系统完全破坏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Langflow OSS | 1.0.0 ~ 1.10.0 | cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-8635
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8635
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-8635 (1)
Same Patch Batch · IBM · 2026-07-17 · 34 CVEs total
| CVE-2026-9135 | 9.9 CRITICAL | Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation |
| CVE-2026-8859 | 9.9 CRITICAL | Path Traversal in APIRequest Component via Content-Disposition Header |
| CVE-2026-8481 | 9.9 CRITICAL | Remote Code Execution via Code Validation Endpoint |
| CVE-2026-8476 | 9.9 CRITICAL | Disk Cache Deserialization Remote Code Execution Vulnerability |
| CVE-2026-13446 | 9.8 CRITICAL | Langflow is affected by remote code execution, denial of service, path traversal, and expo |
| CVE-2026-9202 | 9.8 CRITICAL | Unauthenticated User Registration Could Lead to Remote Code Execution |
| CVE-2026-9198 | 9.8 CRITICAL | Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation |
| CVE-2026-9103 | 9.8 CRITICAL | Unauthenticated Superuser Token Issuance via Auto-Login Endpoint |
| CVE-2026-8505 | 9.8 CRITICAL | Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution |
| CVE-2026-15091 | 9.3 CRITICAL | Multiple Vulnerabilities in IBM Engineering AI hub. |
| CVE-2026-7667 | 8.8 HIGH | Path Traversal Vulnerability in API Request Component Content-Disposition Header Processin |
| CVE-2026-8056 | 8.8 HIGH | Parameter Injection Vulnerability in API Graph Execution Engine |
| CVE-2026-7755 | 8.8 HIGH | MCP Server Configuration Validator Bypass via File Upload API |
| CVE-2026-14499 | 8.8 HIGH | Langflow is affected by remote code execution, denial of service, path traversal, and expo |
| CVE-2026-13445 | 8.1 HIGH | Langflow is affected by remote code execution, denial of service, path traversal, and expo |
| CVE-2026-13448 | 8.1 HIGH | Langflow is affected by remote code execution, denial of service, path traversal, and expo |
| CVE-2026-13473 | 8.1 HIGH | IBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow |
| CVE-2026-9762 | 7.8 HIGH | IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc |
| CVE-2026-7754 | 7.7 HIGH | SSRF Protection Configuration Vulnerability |
| CVE-2026-7872 | 7.5 HIGH | Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authenti |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Langflow OSS
- CVE-2026-19875
Unauthenticated Registration POST Endpoint Permits Admin Ema - CVE-2026-19297
Insufficient Authentication Brute Force Protection on Login - CVE-2026-17624
Langflow OSS is affected by arbitrary code execution in comp - CVE-2026-17633
Langflow OSS is affected by arbitrary code execution in comp - CVE-2026-17632
Langflow OSS is affected by arbitrary code execution in comp
Same vendor: IBM
Same weakness: CWE-94
- CVE-2026-76605
Joomla Extension - fabrikar.com - Remote code execution via - CVE-2026-77992
Joomla Extension - fabrikar.com - heredoc terminator breakou - CVE-2026-76604
Joomla Extension - fabrikar.com - Unauthenticated remote cod - CVE-2026-3424
kk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shor - CVE-2026-77415
JSONata: Arbitrary Code Execution via crafted JSONata expres
V. Comments for CVE-2026-8635
No comments yet