CVE-2026-91989.8CriticalCWE-94
CVE-2026-9198: IBM Langflow Code Injection Vulnerability
IBM · Langflow
Vendor fix available · Affected: IBM Langflow · Exploitation: in CISA KEV since 4 Aug
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue4 Aug
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public9 public GitHub repositories (unverified), listed by PoC-in-GitHub21 Jul
- Not established: not seen
28.7%probability of exploitation in the next 30 days
98th percentile
050100
Higher than 98% of scored CVEs
9.8CriticalCVSS 3.1
LowMediumHighCrit.
Federal deadline
CISA KEV · added 4 Aug · catalogue entry
Passed 99 days ago
DescriptionNVD
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.
- CISA KEV
- Listed since 4 Aug · catalogue entry
- Public check
- IBM Langflow - Remote Code Execution · nuclei template in projectdiscovery/nuclei-templates
- Vendor
- IBM
- Published
- July 2026
What changed
- CISA added it to the KEV catalogue CISA
- PoC-in-GitHub lists 9 public GitHub repositories (unverified) PoC-in-GitHub
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Coverage5 articles · 4 outlets
One row per outlet, in order of first report. First in our coverage: CISA, 4 Aug.
Quiet for 15 weekslast report 5 Aug5 articles4 outlets
- Tue 4 Aug, 16:57 UTC. CISA, first report. Critical IBM Langflow Flaw Exploited, Patch Urged by CISA. Cites a CVE in CISA KEV.
- Tue 4 Aug, 17:05 UTC. CISA. CISA Flags IBM Langflow CVE-2026-9198 Code Injection in KEV List. Cites a CVE in CISA KEV.
- Wed 5 Aug, 03:51 UTC. SecurityOnline, its first report on the story. N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV Catalog. Cites a CVE in CISA KEV.
- Wed 5 Aug, 10:11 UTC. SecurityWeek, its first report on the story. CISA warns of exploits in IBM Langflow, Nable, and Tomcat flaws. Cites a CVE in CISA KEV.
- Wed 5 Aug, 16:29 UTC. Security Affairs, its first report on the story. CISA Flags Critical Flaws in IBM Langflow, N able and Tomcat. Cites a CVE in CISA KEV.
- First report
- Article
- Official notice
- Running total
Added to CISA KEV
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 4 Aug 16:57 | CISA | Critical IBM Langflow Flaw Exploited, Patch Urged by CISA |
| 4 Aug 17:05 | CISA | CISA Flags IBM Langflow CVE-2026-9198 Code Injection in KEV List |
| 5 Aug 03:51 | SecurityOnline | N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV Catalog |
| 5 Aug 10:11 | SecurityWeek | CISA warns of exploits in IBM Langflow, Nable, and Tomcat flaws |
| 5 Aug 16:29 | Security Affairs | CISA Flags Critical Flaws in IBM Langflow, N able and Tomcat |
- CISA Flags Critical Flaws in IBM Langflow, N able and TomcatSecurity Affairs
- N-able N-central Flaw Exploited in the Wild as CISA Adds Three to KEV CatalogSecurityOnline · mentions it in passing
- CISA Flags IBM Langflow CVE-2026-9198 Code Injection in KEV ListCISA · official notice
- Critical IBM Langflow Flaw Exploited, Patch Urged by CISACISA · official notice · first in our coverage
New articles also arrive in the RSS feed.