{"data":{"id":"0533e072-def2-4ab0-944d-25b8125320fc","title":"CVE-2026-8635: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly…","summary":"CVE-2026-8635 affects IBM Langflow OSS versions 1.0.0 through 1.10.0. An authenticated user can escalate privileges to superuser by directly manipulating the database. From there the attacker can execute arbitrary system commands and achieve full system compromise with Langflow service permissions. The weakness is classified as CWE-94, Improper Control of Generation of Code ('Code Injection').","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-8635","publishedAt":"2026-07-17T20:17:31.527Z","cveId":"CVE-2026-8635","cweIds":["CWE-94"],"cvssScore":"9.9","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["IBM Langflow OSS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS privilege escalation to superuser via database manipulation","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00594,"epssCheckedAt":"2026-11-13T06:05:52.649Z","kevDateAdded":null,"advisoryAliases":["GHSA-xxqg-9cxv-cq9v"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T18:09:59.661Z","patchAvailable":null,"disclosureDate":"2026-07-17T20:17:31.527Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}