CVE-2026-9198

CRITICAL9.8

CISA KEV

Published 2026-07-17 · Updated 2026-08-17 · Source psirt@us.ibm.com

Summary

CVE-2026-9198 is a critical-severity (CVSS 9.8) vulnerability in IBM Langflow. CISA added it to the Known Exploited Vulnerabilities catalog on August 4, 2026, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by August 7, 2026. CISA does not currently list it as used in ransomware campaigns. IBM has 8 vulnerabilities in the KEV catalog, 2 of them linked to ransomware.

All 8 known-exploited IBM vulnerabilities →

Description

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-94

CISA Known-Exploited Vulnerability

Product: IBM — Langflow

Name: IBM Langflow Code Injection Vulnerability

Date added: 2026-08-04 · Due: 2026-08-07

Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

References

View on NVD

More exploited IBM vulnerabilities

Most recently added to CISA KEV

CVE-2022-47986
RANSOMWARE
Aspera Faspex — IBM Aspera Faspex Code Execution Vulnerability
added 2023-02-21
CVE-2013-3993
RANSOMWARE
InfoSphere BigInsights — IBM InfoSphere BigInsights Invalid Input Vulnerability
added 2022-05-25
CVE-2015-7450
WebSphere Application Server and Server Hypervisor Edition — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
added 2022-01-10
CVE-2020-4430
Data Risk Manager — IBM Data Risk Manager Directory Traversal Vulnerability
added 2021-11-03
CVE-2020-4427
Data Risk Manager — IBM Data Risk Manager Security Bypass Vulnerability
added 2021-11-03
CVE-2020-4428
Data Risk Manager — IBM Data Risk Manager Remote Code Execution Vulnerability
added 2021-11-03

View all →

Related CVEs

Same severity, most recent

CVE-2026-111444
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.
2026-10-16 · score 9.8
CVE-2026-111329
JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets.
2026-10-15 · score 9.8
CVE-2026-111322
Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.
2026-10-15 · score 9.8
CVE-2026-111283
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.
2026-10-15 · score 9.0
CVE-2026-111281
Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen authserverip and authcode, making the jooandiag daemon execute their commands through /bin/sh, giving full device control.
2026-10-15 · score 9.8