{"cve":{"cve_id":"CVE-2026-8635","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.0053,"epss_percentile":0.42517,"epss_as_of":"2026-08-26","description":"IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions.","published_at":"2026-07-17T19:02:03.977000Z","last_modified_at":"2026-07-23T05:16:39.463000Z","cvss_v3_score":9.9,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_v3_severity":"CRITICAL","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":false,"ssvc_technical_impact":"total","cwes":["CWE-94"],"nvd_references":["https://www.ibm.com/support/pages/node/7278925"],"vuln_status":"Analyzed","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-07-17T19:35:28.549450Z","updated_at":"2026-07-24T09:15:01.106740Z"},"effective_severity":"CRITICAL","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"L","value_label":"Low"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"C","value_label":"Changed"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"ibm","vendor_name":"ibm","product_slug":"langflow-oss","product_name":"langflow_oss","version_start":"1.0.0","version_start_inclusive":true,"version_end":"1.0.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*"},{"vendor_slug":"ibm","vendor_name":"ibm","product_slug":"langflow-oss","product_name":"langflow_oss","version_start":"1.10.0","version_start_inclusive":true,"version_end":"1.10.0","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:ibm:langflow_oss:1.10.0:*:*:*:*:*:*:*"},{"vendor_slug":"langflow","vendor_name":"langflow","product_slug":"langflow","product_name":"langflow","version_start":"1.0.0","version_start_inclusive":true,"version_end":"1.10.1","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7278925","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2026-07-17T19:02:03.977000Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-07-21T02:41:10.173779Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-07-21T02:41:10.173779Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-07-21T02:41:10.173779Z","label":"SSVC decision revised","source":"vulnrichment"}]}