CVE-2026-8505 IBM CVE debrief

Who should care

Defenders responsible for Langflow deployments, particularly those with `WEBHOOK_AUTH_ENABLE` set to `False`, should assess exposure and apply the patch to prevent unauthenticated flow execution.

Why it matters

CVE-2026-8505 is a critical vulnerability in Langflow that allows unauthenticated users to execute flows, potentially leading to RCE or DoS. Defenders should verify exposure, apply the patch, and monitor for suspicious activity.

• Potential Remote Code Execution (RCE) or Denial of Service (DoS) due to unauthenticated flow execution.
• Verification of Langflow version and `WEBHOOK_AUTH_ENABLE` setting is necessary to determine exposure.
• Applying the patch to upgrade to Langflow version 1.9.1 or later is crucial to prevent exploitation.
• Monitoring for unauthenticated flow execution attempts can help detect potential attacks.

Technical summary

The vulnerability is in the webhook authentication path, `AuthService.get_webhook_user`, where the system incorrectly bypasses API key validation when `WEBHOOK_AUTH_ENABLE` is set to `False`. This allows a remote attacker who knows a flow's UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE) or Denial of Service (DoS). The vulnerability was introduced in version 1.7.0 and affects versions up to 1.9.0. The issue is resolved in version 1.9.1. Defenders should prioritize verifying exposure and applying the patch, as unauthenticated flow execution could lead to RCE or DoS.

Defensive priority

Defenders should prioritize verifying exposure and applying the patch, as unauthenticated flow execution could lead to RCE or DoS.

Recommended defensive actions

• Verify Langflow version and check if `WEBHOOK_AUTH_ENABLE` is set to `False`.
• Apply the patch by upgrading to Langflow version 1.9.1 or later.
• Monitor for unauthenticated flow execution attempts.
• Restrict access to flow execution to authenticated users only.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The vulnerability is confirmed in Langflow versions 1.7.0 through 1.9.0. The issue is resolved in version 1.9.1. The CVE record and source item provide details on the vulnerability and affected versions.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.