CriticalVulnerability
CVE-2026-8505: IBM Langflow OSS unauthenticated flow execution through webhook authentication
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-8505
- Published
- Record updated
- Affected
- langflow >= 1.7.0, <= 1.9.0
- Fixed in
- 1.9.1
- released April 23, 2026, 84 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.9%
Summary
IBM Langflow OSS versions 1.0.0 through 1.10.0 contain a flaw in the webhook authentication logic that skips API key validation when WEBHOOK_AUTH_ENABLE is set to False, which is the default. A remote attacker who knows a flow's UUID can execute that flow as if they were its owner, potentially leading to Remote Code Execution (RCE). The NVD assessment has not yet been provided.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- langflowPyPIReaches an LLM package through dependencies
Related items
- MediumCVE-2026-127202: MLflow path traversal through model_id in the log outputs APISimilar attack · NVD/CVE Database
- LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
- MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
- MediumAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsSimilar attack · Palo Alto Unit 42
- MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database