CVE-2026-9198KEVEXPLOITEDPATCHED

langflow · langflow

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Affected Products

Vendor	Product	Versions
langflow	langflow	1.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
ibm	langflow	cert_advisory	90%

References

https://www.ibm.com/support/pages/node/7278927(vendor-advisory, patch)
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9198.yaml(exploit, nuclei)

Related News (6 articles)

Tier D

Heise Security1d ago

Angreifer attackieren IBM Langflow und Apache-Tomcat-Server

→ No new info (linked only)

Tier D

BleepingComputer3d ago

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

→ No new info (linked only)

Tier D

SecurityWeek3d ago

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

→ No new info (linked only)

Tier D

The Hacker News3d ago

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

→ No new info (linked only)

Tier B

BSI Advisories19d ago

[NEU] [hoch] IBM Langflow Desktop OSS: Mehrere Schwachstellen

→ No new info (linked only)

Tier C

VulDB22d ago

CVE-2026-9198 | IBM Langflow OSS up to 1.10.0 Code Execution exec os command injection

→ No new info (linked only)

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV✅ Yes

Actively exploited✅ Yes

Patch available

https://www.ibm.com/support/pages/node/7278927

CWECWE-94

PublishedJul 17, 2026

Last enriched22d agov2

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-9205

Langflow is affected by weaknesses in secret handling and sensitive configuration access

Trending: 30

HIGHCVE-2026-9201

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Trending: 30

HIGHCVE-2026-9196

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Trending: 30

HIGHCVE-2026-17632

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Trending: 30

HIGHCVE-2026-17624

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Trending: 30

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 17, 2026

Added to CISA KEV

Jul 17, 2026

Discovered by ZDM

Jul 17, 2026

Updated: affectedVersions, cweIds, tags

Jul 17, 2026

Actively Exploited

Aug 5, 2026

Exploit Available

Aug 5, 2026

Patch Available

Aug 5, 2026

Version History

Last enriched 22d ago

v2Tier C22d ago

Expanded affected versions to include all releases from 1.0.0 through 1.10.0, added CWE-78 for OS command injection, and added relevant tags identifying the specific vulnerability mechanism.

affectedVersionscweIdstags

via VulDB

v122d ago

Initial creation