# CVE-2026-8505: IBM Langflow OSS authentication bypass in webhook logic

Source: https://junglewise.ai/threats/cve-2026-8505-ibm-langflow-oss-authentication-bypass-in-webhook-logic  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-17. Updated: 2026-07-17  
License: CC BY 4.0 with a link back

CVE-2026-8505 · Severity: critical · CVSS 9.8 · Published 2026-07-17

IBM Langflow OSS, a tool used for building and deploying AI workflows, contains a critical security flaw in its webhook authentication. An unauthorized attacker can bypass security checks to trigger and run any automated workflow as if they were the owner. This could allow an attacker to execute malicious code on the server or cause a complete service outage.

Technologies: [IBM Langflow OSS](https://junglewise.ai/threats/technologies/langflow-oss), [langflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-langflow). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-8505 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-8505 being exploited in the wild.

**How severe is CVE-2026-8505?** Critical severity, with a CVSS score of 9.8, published 17 July 2026.

**Which products and versions are affected?** IBM Langflow OSS 1.0.0 through 1.10.0; langflow (PyPI) >= 1.7.0, <= 1.9.0, ECOSYSTEM:introduced=1.7.0,fixed=1.9.1.

**Is there a fix for CVE-2026-8505?** Yes. langflow (PyPI): upgrade to 1.9.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-8505 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-8505?** Check whether you run IBM Langflow OSS or langflow (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- langflow (PyPI): upgrade to 1.9.1 or later

  ```sh
  pip install "langflow>=1.9.1"
  ```


## Technical details

A vulnerability in Langflow's webhook authentication logic exists where the system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False, which is the default setting. A remote, unauthenticated attacker who knows or discovers a flow's UUID can execute that flow with the privileges of the owner. Depending on the components within the triggered flow, this can lead to Remote Code Execution (RCE) or Denial of Service (DoS). The issue is caused by a failure to enforce authentication checks in the webhook endpoint handler. Users should upgrade to Langflow OSS version 1.10.1 to remediate this vulnerability.

## Affected products

- IBM Langflow OSS 1.0.0 through 1.10.0

## Identifiers

- CVE-2026-8505
- GHSA-cf6m-vc3m-7cgm
- PYSEC-2026-4233

## Timeline

- 2026-07-02: disclosed: Initial publication of the security bulletin by IBM.
- 2026-07-17: advisory: NVD published the CVE record.

## References

- [https://www.ibm.com/support/pages/node/7278921](https://www.ibm.com/support/pages/node/7278921)

## Related threats

- [IBM Langflow OSS path traversal arbitrary file read and write](https://junglewise.ai/threats/cve-2026-97677-ibm-langflow-oss-1-0-0-through-1-12-2-an-authenticated-flow)
- [IBM Langflow OSS authentication bypass](https://junglewise.ai/threats/cve-2026-93680-ibm-langflow-oss-1-0-0-through-1-12-8-could-allow-a-remote)
- [IBM Langflow OSS denial of service via resource exhaustion](https://junglewise.ai/threats/cve-2026-90991-ibm-langflow-oss-1-0-0-through-1-12-4-could-allow-a-remote)
- [IBM Langflow OSS path traversal arbitrary file overwrite](https://junglewise.ai/threats/cve-2026-77819-ibm-langflow-oss-1-0-0-through-1-12-3-could-allow-a-remote)
- [IBM Langflow OSS improper sanitization of secrets in exports](https://junglewise.ai/threats/cve-2026-77817-ibm-langflow-oss-1-0-0-through-1-12-4-could-allow-a-remote)