CVE-2026-8635
Critical · CVSS 9.9- CVSS
- 9.9
- nvd
- EPSS
- —
- KEV
- No
- Class
- kernel local
- CWE-94
Description
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.
References
Status: profiled · ingested 2026-07-20T18:00:18.000Z