TI-2026-07467 Aliases CVE-2026-8505 GHSA-9cc5-j3qq-69gv GHSA-cf6m-vc3m-7cgm

Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution

MEDIUM 50CWE-306Published 2026-07-17 · Updated 2026-07-23

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-306.

Summary

IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow's UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0087 59th percentileScored 2026-11-07

Fix Fixed langflow (PyPI): 1.9.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
IBM	Langflow OSS	1.0.0 – 1.10.0	—	No fix listed	CNA
—	langflow (PyPI)	1.7.0 to before 1.9.1	1.9.1	Patch available	GHSA-cf6m-vc3m-7cgm

Langflow OSS VendorIBM Affected 1.0.0 – 1.10.0 Fixed in — No fix listed CNA
langflow (PyPI) Vendor— Affected 1.7.0 to before 1.9.1 Fixed in 1.9.1 Patch available GHSA-cf6m-vc3m-7cgm

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:a:langflow:langflow::::::::	1.0.0 to before 1.10.1	Vulnerable	Langflow
cpe:2.3:o:apple:macos:-:::::::*	not specified by NVD	Running on	Apple
cpe:2.3:o:linux:linux_kernel:-:::::::*	not specified by NVD	Running on	Linux
cpe:2.3:o:microsoft:windows:-:::::::*	not specified by NVD	Running on	Microsoft

cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:* Versions 1.0.0 to before 1.10.1 Vulnerable ·Langflow
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

Fix · GHSA-cf6m-vc3m-7cgm langflow (PyPI) Fixed in 1.9.1 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-8505
2026-10-03 Alias added: GHSA-9cc5-j3qq-69gv
2026-10-06 Alias added: GHSA-cf6m-vc3m-7cgm
2026-10-06 Fix available: PyPI/[email protected] · GHSA-cf6m-vc3m-7cgm
2026-10-06 CVSS score added · GHSA-cf6m-vc3m-7cgm
2026-10-06 Weakness changed · GHSA-cf6m-vc3m-7cgm
2026-10-06 7 new references · GHSA-cf6m-vc3m-7cgm

References

Patch 1

https://www.ibm.com/support/pages/node/7278921

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-8505

Other 5

TI-2026-08085 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation KEVCVSS 3.1CRITICAL 9.8
TI-2022-23774 IBM Aspera Faspex code execution KEVCVSS 3.1CRITICAL 9.8
TI-2020-03794 Improper authentication in IBM Data Risk Manager KEVCVSS 3.1CRITICAL 9.8
TI-2019-03441 Code injection in IBM Planning Analytics KEVCVSS 3.1CRITICAL 9.8
TI-2017-03639 Improper handling of exceptional conditions in Apache Struts KEVCVSS 3.1CRITICAL 9.8
TI-2015-06198 Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT… KEVCVSS 3.1CRITICAL 9.8

See all 9711 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences