CVE-2026-8182

High

Open

TLP:CLEAR

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests.

Details

CVSS Score: 8.8
EPSS Score ⓘ: 0.38%

31.1th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Aug 5, 2026
Last Modified: Aug 6, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.