PT-2026-68303 · Ibm · Langflow Oss

CVE-2026-8182

·

Published

2026-08-05

·

Updated

2026-08-06

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3
Description Remote attackers can execute arbitrary code on the server without authentication by sending two HTTP requests.
Recommendations Update IBM Langflow OSS to a version later than 1.10.3.

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-8182

Affected Products

Langflow Oss