Langflow OSS Pre-Auth RCE via Combined Auth and Code Eval (CVE-2026-9198)

Vulnerability Overview CVE ID: CVE-2026-9198 Description: Langflow OSS allows unauthenticated attackers to achieve remote code execution (RCE) by chaining two distinct vulnerabilities. The first vulnerability involves an unauthenticated endpoint that issues a superuser token to any network caller. The second vulnerability is in the code validation endpoint, which executes arbitrary Python code. Attackers can exploit these issues by first obtaining a superuser token from the auto-login endpoint and then using that token to submit malicious code to the validation endpoint. The code validator executes comments present in Python decorators, default arguments, and function definitions, thereby enabling arbitrary command execution on the host system. This affects all default deployments where auto-login is enabled and the validation endpoint is network-accessible. CWE ID: CWE-94: Improper Control of Generation of Code (Code Injection) CVSS Score: 9.8 CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Affected Products Affected Product: Langflow OSS Affected Versions: 1.0.0-1.10.0 Remediation Recommended Action: IBM strongly recommends immediately resolving this vulnerability by upgrading to Langflow OSS version 1.10.1. Additional Information Document Number: 7278927 Last Modified Date: July 2, 2026 Initial Publication Date: July 2, 2026 Disclaimer According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an industry open standard designed to convey vulnerability severity and help determine response urgency and priority. IBM provides CVSS scores "as is," without any express or implied warranties. Customers are responsible for assessing the impact of vulnerabilities on their actual or potential security vulnerabilities. IBM periodically updates the component records included in its product portfolio. As part of this work, if IBM identifies previously unrecognized packages in the product/service list, regardless of the CVE date, IBM addresses the associated vulnerabilities. Furthermore, IBM is working to inform customers about relevant vulnerabilities so that they are aware. The referenced "Affected Products and Versions" are intended solely to list products and versions supported by IBM that are not past their support or warranty period. Therefore, the reference to unsupported or extended support products and versions in this security advisory does not constitute a determination by IBM that they are unaffected by the vulnerability. The reference to one or more unsupported versions in this security advisory does not create any obligation for IBM to provide fixes for unsupported or extended support products or versions.

Goal Reached Thanks to every supporter — we hit 100%!

Langflow OSS Pre-Auth RCE via Combined Auth and Code Eval (CVE-2026-9198)