CVE-2026-9198
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
- Affected products
- Langflow Oss
- Langflow
- < 1.10.1
- Fix
- Available
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 17.4% (97th percentile)
- Weakness
- CWE-94
- NVD status
- Analyzed
- Published
- 2026-07-17
Fix
IBM strongly recommends addressing the vulnerability now by upgrading Langflow OSS to version 1.10.1 https://pypi.org/project/langflow/
CVE-2026-9198 at NVD
5 known exploits for CVE-2026-9198
Proof-of-concept code and exploit modules indexed by Sploitus