Back Csa.Sg

Active exploitation of Critical Vulnerability in IBM Langflow OSS

Csa.Sg • August 6, 2026

Attackers are actively exploiting a critical vulnerability in IBM Langflow OSS to achieve unauthenticated remote code execution (RCE). Users and administrators of affected products are advised to apply the latest security updates immediately.

Langflow is an open source low-code tool for building Al agents and other Al applications. Security updates have been released to address a critical vulnerability (CVE-2026-9198) affecting IBM Langflow OSS. This vulnerability has a Common Vulnerability Scoring System (CVSS v3.1) score of 9.8 out of 10.

Successful exploitation of this code injection vulnerability could allow an unauthenticated attacker to achieve full remote code execution (RCE) on affected default Langflow deployments.

This vulnerability is reportedly being actively exploited.

The vulnerability affects IBM Langflow OSS versions 1.0.0 through 1.10.0.

Users and administrators of affected products are advised to update to the latest versions immediately.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in IBM Langflow Under Active Exploitation IBM Langflow OSS is facing a critical remote code execution (RCE) vulnerability, tracked as CVE-2026-9198, which allows unauthenticated attackers to execute arbitrary code on default deployments. The vulnerability combines an authentication bypass with a code execution flaw, enabling attackers to gain superuser access via the /api/v1/auto_login endpoint and execute code through the /api/v1/validate/code endpoint. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added this CVE to its Known Exploited Vulnerabilities catalog on August 4, 2026, following evidence of active exploitation. Organizations using Langflow OSS versions 1.0.0 to 1.10.0 are advised to upgrade to version 1.10.1 or later immediately. The vulnerability has a CVSS score of 9.8, indicating its critical nature, and poses significant risks to organizations that have not hardened their default configurations. The urgency is further emphasized by a federal directive requiring remediation by August 7, 2026. 7 sources 80

Extracted Entities

Active exploitation of Critical Vulnerability in IBM Langflow OSS

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)