CVE-2026-9198
Critical CVSS 9.8 Known exploitedPublished 2026-07-17 · last changed 2026-08-17 · added to CISA KEV 2026-08-04
The fix
We hold no Microsoft remediation data for CVE-2026-9198, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.
What it is
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
Sources
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H