Is CVE-2026-8635 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8635 being exploited in the wild.

How severe is CVE-2026-8635?

Critical severity, with a CVSS score of 9.9, published 17 July 2026.

Which products and versions are affected?

IBM Langflow OSS 1.0.0 through 1.10.0.

Is there a fix for CVE-2026-8635?

A patch was published on 2026-07-17: Remediation available in version 1.10.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-8635 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-8635?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8635: IBM Langflow OSS privilege escalation in Python Interpreter component

CVE-2026-8635 · Severity: critical · CVSS 9.9 · Published 2026-07-17

IBM Langflow OSS, a tool used for building multi-agent AI applications, contains a critical vulnerability that allows users with basic access to take full control of the system. By exploiting a flaw in how the software handles custom code, an attacker can grant themselves administrator privileges, access the underlying database, and execute commands on the server. This could lead to the theft of sensitive AI models, data exposure, or a complete takeover of the infrastructure hosting the service.

Quick answers

Is CVE-2026-8635 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8635 being exploited in the wild.
How severe is CVE-2026-8635?: Critical severity, with a CVSS score of 9.9, published 17 July 2026.
Which products and versions are affected?: IBM Langflow OSS 1.0.0 through 1.10.0.
Is there a fix for CVE-2026-8635?: A patch was published on 2026-07-17: Remediation available in version 1.10.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-8635 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-8635?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A code injection vulnerability (CWE-94) exists in the Python Interpreter component of IBM Langflow OSS versions 1.0.0 through 1.10.0. The flaw is located in the PythonREPLComponent, where insufficient sandboxing and validation of user-supplied Python code allow an authenticated attacker to execute arbitrary code. By leveraging this access, an attacker can directly manipulate the application's database to escalate their privileges to superuser status or execute system-level commands with the permissions of the Langflow service. This vulnerability is exploitable over the network by any user with valid credentials. IBM has released version 1.10.1 to remediate this issue.

Affected products

IBM Langflow OSS 1.0.0 through 1.10.0

Timeline

2026-07-02: advisory: Initial publication of IBM security bulletin
2026-07-17: disclosed: NVD publication date
2026-07-17: patched: Remediation available in version 1.10.1

References

https://www.ibm.com/support/pages/node/7278925

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.