CVE-2026-9198

IBM Langflow OSS unauthenticated code execution via auto-login bypass

critical · 9.8

Known exploited

Fix listed

IBM Langflow OSS

Published Jul 17, 2026, 17:36 UTC

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Reported fixed versions

1.10.1

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.