Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
IBM Langflow has a critical flaw that lets anyone on the network run code on the server without needing a password. An attacker can bypass login protections and execute arbitrary commands, taking over the entire system.
CVE-2026-9198 chains two API endpoints: /api/v1/auto_login issues SUPERUSER tokens to unauthenticated network callers, and /api/v1/validate/code executes arbitrary Python code via exec(). An attacker with network access can obtain elevated privileges and achieve remote code execution on default deployments (CVSS 9.8).