CVE-2026-85025

critical · 9.8

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls.

9.8

CVSS

0.6%

EPSS (exploit prob.)

49th

EPSS percentile

2026-09-10

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-863

Affected products

Vendor	Product	Affected versions
langflow	langflow	>= 1.0.0, < 1.11.6

Check a specific version with /api/v1/cve/match.

References

https://www.ibm.com/support/pages/node/7286666

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-85025