CVE-2026-9198

CVSS: 9.8 Critical
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Risk score: 100.0
Known exploited: CISA KEV
Published: 2026-07-17
Status: Analyzed

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Weaknesses

CWE-94

Coverage 3

threat-intel

IBM's agentic AI platform is under active attack - patch now

IBM's agentic AI platform is currently under active attack, with vulnerabilities exploited to gain control of systems. Attackers are leveraging prompt injection techniques to manipulate other AI agents, highlighting a gr…

The Register · Aug 5, 2026 High

CVE-2026-9198 CH IR prompt injection ai security vulnerability

vulnerability

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

The CISA has issued a warning about three actively exploited vulnerabilities affecting IBM Langflow OSS, N-able N-central, and Apache Tomcat. These vulnerabilities – CVE-2026-9198, CVE-2026-18556, and CVE-2026-34486 – ar…

SecurityWeek · Aug 5, 2026 High

CVE-2026-9198 CVE-2026-18556 CVE-2026-18577 CH cve patch remote code execution

threat-intel

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. CISA has added three vulnerabilities to its KEV catalog, including a critical code injection flaw in Langflow, a Tomcat encryption bypass, and an authentication bypass in N-able N-central. These flaws are curren…

The Hacker News · Aug 5, 2026 Critical

CVE-2026-9198 CVE-2026-34486 CVE-2026-18556 CN vulnerability threat-actor ai

All articles mentioning it

news.mlab.sh