What is CVE-2026-8182?
This critical vulnerability in IBM Langflow OSS allows unauthenticated remote code execution (RCE) on the server via just 2 HTTP requests. All installations from version 1.0.0 through 1.10.3 are affected, requiring immediate upgrade to a patched version.
Azərbaycanca: Bu kritik zəiflik IBM Langflow OSS platformasında uzaqdan kod icrasına (RCE) imkan verir ― autentifikasiya tələb etmədən yalnız 2 HTTP sorğusu ilə serverdə ixtiyari kod icra edilə bilər. 1.0.0-dən 1.10.3-ə qədər versiyalar təsirlənir, dərhal yeniləmə tətbiq edilməlidir.
Related CVEs
link basis: shared vendor: IBM
FAQ2
Which versions of IBM Langflow are affected by CVE-2026-8182?
This critical RCE vulnerability affects all versions of IBM Langflow OSS from 1.0.0 through 1.10.3.
Is authentication required to exploit CVE-2026-8182?
No, this vulnerability allows unauthenticated remote code execution on the server via just 2 HTTP requests, without requiring any authentication.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.