Remote Code Execution Vulnerability in IBM Langflow OSS by IBM
CVE-2026-9198
Key Information:
- Vendor
IBM
- Status
- Vendor
- CVE Published:
- 17 July 2026
Badges
What is CVE-2026-9198?
CVE-2026-9198 is a severe vulnerability found in IBM Langflow OSS, affecting versions 1.0.0 through 1.10.0. This particular risk allows unauthorized attackers to execute remote code, posing a significant threat to organizations using this software. IBM Langflow OSS is designed for robust natural language processing tasks and aims to facilitate the development of AI models. The vulnerability stems from an improper authentication mechanism that enables attackers to obtain SUPERUSER tokens and then leverage these tokens to execute arbitrary code via API calls. This flaw can lead to a complete compromise of default deployments, enabling malicious actors to take control of critical systems and manipulate data or applications freely.
Potential impact of CVE-2026-9198
-
Complete System Compromise: The vulnerability allows attackers to gain full remote access to systems running default installations of IBM Langflow OSS, enabling them to execute any command, potentially leading to data theft and destruction.
-
Unauthorized Data Manipulation: With the capability to run arbitrary code, attackers can manipulate sensitive data, possibly altering critical business processes and affecting the overall integrity of organizational data.
-
Increased Ransomware Risk: The exploitation of this vulnerability could facilitate the deployment of ransomware or other malware, putting organizations at risk of financial loss, regulatory penalties, and reputational damage due to data breaches.
CISA has reported CVE-2026-9198
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2026-9198 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Affected Version(s)
Langflow OSS 1.0.0 <= 1.10.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
News Articles
IBM's agentic AI platform is under active attack - patch now
A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA
3 days ago
IBM's agentic AI platform is under active attack - patch now
A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA
3 days ago
TechtimesN-central's Incomplete Patch Left MSP Clients Exposed While Attackers Held Both Keys
N-able N-central vulnerability added to CISA’s Known Exploited Vulnerabilities catalog twice in one week -- covering both the original authentication bypass and its failed patch -- alongside Langflow
3 days ago
References
EPSS Score
17% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
- 📰
First article discovered by Techtimes
- 🦅
CISA Reported
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved