Patch Forecast
Red warning
Act within 24 hours. CISA deadline for US federal agencies: 7 Aug 2026.

CVE-2026-9198 Exploited in the wild

IBM Langflow Code Injection Vulnerability

Risk score
89/100
CVSS
9.8 v3.1
Published
17 Jul 2026
Added to CISA's exploited list
4 Aug 2026

Open in the live forecast Today's forecast

What to know

What it is
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
Affected
Ibm Langflow
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
Exploited in the wild

Story map

Story map: Ibm LangflowTHE FLAWSTHE FIXCVE-2026-9198IBM Langflow Code InjectionVulnerabilityCVSS 9.8 · exploitedFixApply the vendor's securityupdate; see the linked advisory.Who is exposedIbm LangflowRED · ACT TODAYIbm LangflowIBM Langflow OSS 1.0.0 through1.10.0 allows unauthenticatedattackers to chain/api/v1/auto_login (mintsSUPERUSER tokens to anynetwork caller) with/api/v1/validate/code (executes…Where it standsExploited in the wildOn CISA's exploited list since 4 AugUS federal deadline 7 AugHOW IT UNFOLDEDOfficial record on the left, the press on the right, oldest first.4 Aug · CISAAdded to the Known Exploited Vulnerabilities list7 Aug · DeadlineUS federal agencies must have patchedCONNECTS TOSame weaknessCode injection (CWE-94)240 other warnings in 30 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Ibm Langflow: Red, act today. IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

The flaws

  • CVE-2026-9198: IBM Langflow Code Injection Vulnerability (CVSS 9.8 · exploited)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Ibm Langflow

Where it stands

  • Exploited in the wild
  • On CISA's exploited list since 4 Aug
  • US federal deadline 7 Aug

How it unfolded

  1. 4 Aug, CISA (official): Added to the Known Exploited Vulnerabilities list
  2. 7 Aug, Deadline (official): US federal agencies must have patched

Connects to

Why it is Red

  • CVSS 9.8 critical
  • Exploited in the wild (CISA KEV)
  • Remotely exploitable without logging in

CISA required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

References

Original description

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Last activity 4 Aug 2026. Patch Forecast updates every hour.