{"uuid": "55919fcc-3d42-4906-aae6-860de14798e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8505", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116940513412297602", "content": "CRITICAL (CVSS 9.8): CVE-2026-8505 in IBM Langflow OSS 1.0.0 \u2013 1.10.0 enables unauthenticated RCE via default webhook auth config. Set WEBHOOK_AUTH_ENABLE=True to mitigate until official fix. Details: https://radar.offseq.com/threat/cve-2026-8505-vulnerability-in-ibm-langflow-oss-6558aceea84f8b7d #OffSeq #CVE20268505 #RCE #IBM", "creation_timestamp": "2026-07-18T10:30:29.478354Z"}