CVE-2026-8505Critical· 9.8▾ MidnightIBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_A…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.6%
0.6% → 1.0%
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow's UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
langflow >= 1.7.0, <= 1.9.0Patched in:
langflow 1.9.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-105699High· 7.1Langflow is a tool for building and deploying AI-powered agents and workflows
GHSA-9cc5-j3qq-69gvCritical· 9.8Duplicate Advisory: Unauthenticated Flow Execution via Webhook Authentication Bypass
CVE-2026-27966Critical· 9.8Langflow has Remote Code Execution in CSV Agent
CVE-2026-10561Critical· 9.9Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation
CVE-2026-7700Medium· 6.3A weakness has been identified in langflow-ai langflow up to 1.10.2
CVE-2026-9205Critical· 9.1Langflow: Weak Fernet Key via random.seed()