CRITICAL

CVE-2026-9198

Langflow Langflow 2026-07-17 CVSS v3.1

CVSS

9.8

KEV

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Summary dbcve.org

IBM Langflow OSS versions 1.0.0 through 1.10.0 contains a critical authentication bypass vulnerability where the unauthenticated /api/v1/auto_login endpoint issues SUPERUSER tokens to any requester, which can then be used to access /api/v1/validate/code that executes arbitrary Python code via the exec() function, enabling complete remote code execution on default installations.

Mitigation

Immediately restrict or disable the /api/v1/auto_login endpoint, implement proper authentication enforcement on all API endpoints, and add input validation/sandboxing to code execution functionality. Upgrade to a patched version when available.

Weakness (CWE)

CWE-94 Code Injection

EPSS Score

60.6%

Probability of exploitation in next 30 days

99.1th percentile

References

https://www.ibm.com/support/pages/node/7278927 Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9198 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE