CVE-2026-9198
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
- Published
- Jul 17, 2026
- Updated
- Aug 17, 2026
- Assigning CNA
- ibm
- Evidence observed
- Aug 4, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HModerate · next 30 days
- Percentile
- 98.1%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
Sources
modules/exploits/multi/http/langflow_unauth_rce_cve_2026_9198.rb
Metasploit Framework modulesDeclared conditions
- platform: Python($.exploit_multi/http/langflow_unauth_rce_cve_2026_9198.platform)
- verification: check_declared($.exploit_multi/http/langflow_unauth_rce_cve_2026_9198.check)
http/cves/2026/CVE-2026-9198.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: dsl($.matchers[*].type)
- CVE-2026-9198_exploitExploit
Unauthenticated RCE exploit for Langflow OSS chaining auto_login JWT bypass with validate/code exec() to achieve remote command execution and reverse shells.
- CVE-2026-9198Exploit
IBM Langflow Unauthenticated RCE via Auto-Login Bypass
- cve-2026-9198_exploitExploit
Exploit for CVE-2026-9198, containing proof-of-concept payloads and validation steps for assessing the vulnerability in target environments.
- EXPLOIT-CVE-2026-9198Exploit
Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a vulnerable Docker lab for authorized testing and education.
Proof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass
Exploits CVE-2026-9198 in Langflow to execute arbitrary bash commands on target instances via a crafted URL parameter.
- CVE-2026-9198Exploit
CVE-2026-9198利用代码
Exploit script for CVE-2026-9198 targeting IBM Langflow, providing proof-of-concept code to validate vulnerabilities and support authorized security assessments.
- Langflow 1.10.0 - RCEExploit
Richard Howe · multiple · Sep 2, 2026
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.