What is CVE-2026-85025?

CVE-2026-85025 is a critical-severity vulnerability in IBM Langflow Oss, classified under Incorrect Authorization. CVSS score: 9.8/10. Published 2026-09-10.

How severe is CVE-2026-85025?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in IBM Langflow Oss

CVE-2026-85025

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls.

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ibm Langflow Oss

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-85025?: CVE-2026-85025 is a critical-severity vulnerability in IBM Langflow Oss, classified under Incorrect Authorization. CVSS score: 9.8/10. Published 2026-09-10.
How severe is CVE-2026-85025?: Critical severity. CVSS v3 base score is 9.8 out of 10.