CVE-2026-8505 Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution
Unauthenticated attackers can execute arbitrary flows in Langflow OSS due to default webhook authentication bypass, potentially leading to remote code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-8505?
CVE-2026-8505 is a critical authentication bypass vulnerability in Langflow Langflow, published on 17 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOK_AUTH_ENABLE configuration is set to False (which is the default setting). This allows a remote attacker who knows a flow's UUID to execute it as if they were the owner, potentially leading to Remote Code Execution (RCE).
Weakness: CWE-306
Which versions are affected by CVE-2026-8505?
3 open source packages ship an affected version, including langflow. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
langflow PyPI | From 1.7.0 | 1.9.1 |
langflow PyPI | From 1.7.0 | 1.9.1 |
langflow PyPI | From 1.7.0 | 1.9.1 |
Products include Langflow Langflow.
How do I fix CVE-2026-8505?
Upgrade langflow to 1.9.1 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-8505 being exploited?
There is no known exploitation of CVE-2026-8505 in the wild and no public exploit code.
Other vulnerabilities in Langflow Langflow
Sources
Also known as GHSA-cf6m-vc3m-7cgm, PYSEC-2026-4233.