CVE-2026-9198

CriticalCVSS 9.8

Published: 17/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

IBM Langflow OSS versions 1.0.0 through 1.10.0 allow unauthenticated attackers to chain the /api/v1/auto_login endpoint (generates SUPERUSER tokens) with /api/v1/validate/code (executes code via exec()), leading to remote code execution (RCE) on default installations.

Risk Assessment

An attacker can gain full control over the Langflow server by executing arbitrary code, potentially leading to complete application takeover and data access.

Recommendation

Upgrade IBM Langflow OSS to a version above 1.10.0 or apply available security patches that block unauthenticated access to these endpoints.

Original NVD description (English source)

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments