CVE-2026-8481: Remote Code Execution via Code Validation Endpoint
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec() function without sandboxing, input validation, or privilege restrictions, enabling any authenticated user to execute arbitrary system commands with the full privileges of the Langflow server process.
Other sources
Langflow OSS contain a critical remote code execution vulnerability in the code validation API endpoint. The
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Langflow OSSto a version that resolves this vulnerability.Fixed in 1.10.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8481?
CVE-2026-8481 has a severity rating of 9.9, classified as critical.
How do I fix CVE-2026-8481?
To mitigate CVE-2026-8481, upgrade to a patched version of IBM Langflow OSS beyond 1.10.0.
What types of attacks are possible with CVE-2026-8481?
CVE-2026-8481 allows for remote code execution via the insecure code validation API endpoint.
Which versions of IBM Langflow OSS are affected by CVE-2026-8481?
Versions 1.0.0 through 1.10.0 of IBM Langflow OSS are vulnerable to CVE-2026-8481.
What components are involved in CVE-2026-8481?
CVE-2026-8481 primarily involves the code validation API endpoint that executes user-submitted Python code.