CVE-2026-85025

CRITICAL9.8

Published 2026-09-10 · Updated 2026-09-10 · Source psirt@us.ibm.com

Description

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-863

References

https://www.ibm.com/support/pages/node/7286666

View on NVD

Related CVEs

Same severity, most recent

CVE-2026-82107
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication.
2026-09-10 · score 9.6
CVE-2026-82100
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
2026-09-10 · score 9.6
CVE-2026-81204
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.
2026-09-10 · score 9.8
CVE-2026-80424
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction.
2026-09-10 · score 9.1
CVE-2026-79724
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.
2026-09-10 · score 9.8