CVE-2026-9198

nvd.nist.gov • August 10, 2026

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in IBM Langflow Under Active Exploitation IBM Langflow OSS is facing a critical remote code execution (RCE) vulnerability, tracked as CVE-2026-9198, which allows unauthenticated attackers to execute arbitrary code on default deployments. The vulnerability combines an authentication bypass with a code execution flaw, enabling attackers to gain superuser access via the /api/v1/auto_login endpoint and execute code through the /api/v1/validate/code endpoint. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added this CVE to its Known Exploited Vulnerabilities catalog on August 4, 2026, following evidence of active exploitation. Organizations using Langflow OSS versions 1.0.0 to 1.10.0 are advised to upgrade to version 1.10.1 or later immediately. The vulnerability has a CVSS score of 9.8, indicating its critical nature, and poses significant risks to organizations that have not hardened their default configurations. The urgency is further emphasized by a federal directive requiring remediation by August 7, 2026. 7 sources 80

Extracted Entities

CVE-2026-9198

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (2)

MITRE ATT&CK (1)