CVE-2026-9198

critical

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

References

https://www.ibm.com/support/pages/node/7278927

https://www.vulncheck.com/blog/pwning-the-ai-stack

https://www.theregister.com/security/2026/08/05/ibms-agentic-ai-platform-is-under-active-attack-patch-now/5283535

https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html

https://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog

https://github.com/joaovicdev/EXPLOIT-CVE-2026-9198

https://github.com/chessalekin/cve-2026-9198_exploit

https://github.com/CuteeCat/CVE-2026-9198

https://github.com/Procjevt/CVE-2026-9198

https://github.com/samael0x4/CVE-2026-9198

https://github.com/0xgh057r3c0n/CVE-2026-9198

https://github.com/0xdak/CVE-2026-9198_exploit

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9198

Details

Source: Mitre, NVD

Published: 2026-07-17

Updated: 2026-08-17

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.45213