CLAIM-2026-08-10-05

CVE-2026-9198 affects IBM Langflow OSS versions 1.0.0 through 1.10.0 and allows unauthenticated attackers to chain /api/v1/auto_login, which mints SUPERUSER tokens to any network caller, with /api/v1/validate/code, which executes user code via exec(), achieving full remote code execution on default deployments. CVSS 3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Resolved in 1.10.1.

Sources

• nvd2026cve
• ibm2026security