CVE-2026-9198KEVEXPLOITEDPATCHED

ibm · langflow

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Affected Products

Vendor	Product	Versions
ibm	langflow	1.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
ibm	langflow	cert_advisory	90%

References

https://www.ibm.com/support/pages/node/7278927(vendor-advisory, patch)
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9198.yaml(exploit, nuclei)

Related News (4 articles)

Tier D

SecurityWeek2h ago

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

→ No new info (linked only)

Tier D

The Hacker News4h ago

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

→ No new info (linked only)

Tier B

BSI Advisories16d ago

[NEU] [hoch] IBM Langflow Desktop OSS: Mehrere Schwachstellen

→ No new info (linked only)

Tier C

VulDB18d ago

CVE-2026-9198 | IBM Langflow OSS up to 1.10.0 Code Execution exec os command injection

→ No new info (linked only)

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV✅ Yes

Actively exploited✅ Yes

Patch available

https://www.ibm.com/support/pages/node/7278927

CWECWE-94

PublishedJul 17, 2026

Last enriched18d agov2

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-14446

IBM WebSphere Application Server is affected by a privilege escalation

Trending: 35

CRITICALCVE-2026-14512

IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information

Trending: 35

CRITICALCVE-2026-14529

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery

Trending: 33

CRITICALCVE-2026-15435

IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability

Trending: 32

HIGHCVE-2026-15280

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

Trending: 30

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 17, 2026

Added to CISA KEV

Jul 17, 2026

Discovered by ZDM

Jul 17, 2026

Updated: affectedVersions, cweIds, tags

Jul 17, 2026

Actively Exploited

Aug 5, 2026

Exploit Available

Aug 5, 2026

Patch Available

Aug 5, 2026

Version History

Last enriched 18d ago

v2Tier C18d ago

Expanded affected versions to include all releases from 1.0.0 through 1.10.0, added CWE-78 for OS command injection, and added relevant tags identifying the specific vulnerability mechanism.

affectedVersionscweIdstags

via VulDB

v118d ago

Initial creation