Search: CVE-2026-9198

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	KEVEPSS 28%	CVE-2026-9198IBM Langflow OSS · Code Injection Critical9.8KEVEPSS 28%2026-07-17CVE Database V5CVE-2026-9198 IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments KEVEPSS 28%Vulnerability CWE-94	CVE Database V5	2026-07-17

Page 1 of 1 · 1 duplicate CVE record merged