Is CVE-2026-8635 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-8635?

CVE-2026-8635 has a CVSS v3 severity of CRITICAL (9.9).

Back

CVE-2026-8635

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.