{"id":"CVE-2026-8635","aliases":["EUVD-2026-45270","GHSA-xxqg-9cxv-cq9v"],"status":"published","title":"Arbitrary Code Execution in Python Interpreter Component","description":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00594,"percentile":0.48752,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-07-17T19:02:03Z","modified":"2026-10-24T20:10:00Z","products":[{"vendor":"ibm","product":"langflow oss"},{"vendor":"langflow","product":"langflow"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7278925","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8635"},{"url":"https://github.com/advisories/GHSA-xxqg-9cxv-cq9v"}],"sources":{"cve":[{"id":"CVE-2026-8635","title":"Arbitrary Code Execution in Python Interpreter Component","description":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.","status":"published","published":"2026-07-17T19:02:03.977Z","modified":"2026-07-23T03:56:06.201Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T13:48:02.226896Z"}],"euvd":[{"id":"EUVD-2026-45270","description":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.","status":"published","published":"2026-07-17T19:02:03Z","modified":"2026-07-23T03:56:06Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:19:44.433437Z"}],"ghsa":[{"id":"GHSA-xxqg-9cxv-cq9v","title":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to...","description":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.","status":"published","published":"2026-07-17T21:31:45Z","modified":"2026-07-17T21:31:52Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:09:35.806108Z"}],"nvd":[{"id":"CVE-2026-8635","description":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.","status":"published","published":"2026-07-17T20:17:31.527Z","modified":"2026-10-24T20:10:00.137Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:12:30.631352Z"}]}}