CISA Adds Langflow CVE-2026-9198 to Known Exploited Vulnerabilities Catalog | kev-addition
On August 4, 2026, CISA added CVE 2026 9198 to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The vulnerability affects…
Published on MyPrivateClaw
Aug 5, 2026, 4:11 PM UTC
Coverage date
Aug 4, 2026
Last updated
Aug 5, 2026, 4:11 PM UTC
News summary
Langflow OSS is described as an open source framework for building LLM driven agent workflows by SentinelOne, making it a component of the AI agent stack. CVE 2026 9198 was published to the National Vulnerability Database on July 17, 2026 with CVSS base score 9.8 and vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H as assigned by IBM Corporation. CVE 2026 9198 allows unauthenticated attackers to chain the /api/v1/auto login endpoint (which mints SUPERUSER tokens) with /api/v1/validate/code (which executes submitted Python via exec()) to achieve full remote code execution on default Langflow deployments. The auto login endpoint was designed for local development convenience; the vulnerability requires network reachability to the exposed REST API. Langflow OSS versions 1.0.0 through 1.10.0 are affected by CVE 2026 9198; IBM recommends upgrading to version 1.10.1 as the fixed release.