CVE-2026-8481: Langflow

Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec() function without sandboxing, input validation, or privilege restrictions, enabling any authenticated user to execute arbitrary system commands with the full privileges of the Langflow server process.

Affected products

• Langflow Langflow: from 1.0.0, before 1.10.1 (fixed in 1.10.1)

Published 2026-07-17. Last modified 2026-07-23.