Loading vulnerability…
Authenticated code validation API RCE in IBM Langflow OSS
CVE-2026-8481 is a code injection vulnerability affecting IBM Langflow OSS versions 1.0.0 through 1.10.0. The code validation API executes user-supplied Python code directly through Python's built-in exec() function without sandboxing, input validation, or privilege restrictions. Any authenticated user can exploit this behavior to execute arbitrary Python code and system commands with the full privileges of the Langflow server process.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits remote execution of attacker-controlled code and system commands within the Langflow server's execution context. The resulting access carries the full privileges of the server process and can potentially lead to full system compromise, depending on those privileges.
If you can’t patch tonight, do this now.
Until upgrading, restrict access to code execution and validation endpoints. Disable AUTO_LOGIN where enabled to reduce exposure to the separate authentication-bypass flaw that can be chained with this vulnerability. Disabling auto-login does not eliminate exploitation by authenticated users.
Patch, then assume compromise.
Upgrade IBM Langflow OSS to version 1.10.1 or a later vendor-fixed release. Version 1.10.1 fixes CVE-2026-8481 and four other vulnerabilities affecting versions 1.0.0 through 1.10.0.
2 exploits validated by Mallory's analysis.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
12 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.