CVE-2026-9198

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0

Description Unauthenticated attackers can achieve remote code execution (RCE) on default deployments by chaining two endpoints. First, the '/api/v1/auto login' endpoint allows the minting of SUPERUSER tokens to any network caller. Subsequently, the '/api/v1/validate/code' endpoint executes user-provided code via the exec() function, which is a Python function that dynamically executes strings as code. This issue stems from improper management of code generation.

Recommendations Update IBM Langflow OSS to a version later than 1.10.0. Restrict access to the '/api/v1/auto login' and '/api/v1/validate/code' endpoints to minimize the risk of exploitation.