IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
[POC] CVE-2026-9198 — CVE-2026-9198
CVE-2026-9198利用代码
[POC] GHSA-3whf-vgf2-9w6g — CVE-2026-9198
IBM Langflow OSS 1.0.0 through 1.10.0 contains a remote code execution [RCE]
[POC] GHSA-652q-gvq3-74qv — CVE-2026-9198
IBM Langflow Unauthenticated RCE via Auto-Login Bypass
[POC] GHSA-652q-gvq3-74qv — CVE-2026-9198
Proof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass
PoC: CVE-2026-9198
CVE-2026-9198 - IBM Langflow OSS Unauthenticated Remote Code Execution (RCE)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free