CISA Adds IBM Langflow Code Injection Vulnerability to KEV List

## Overview CISA added CVE-2026-9198 to its Known Exploited Vulnerabilities (KEV) list on August 4, 2026. This vulnerability affects IBM Langflow versions 1.0.0 through 1.10.0. It allows unauthenticated attackers to exploit the system, leading to full remote code execution (RCE). ## Technical Details The vulnerability arises from the ability to chain two API endpoints: `/api/v1/auto_login` and `/api/v1/validate/code`. The first endpoint can mint SUPERUSER tokens for any network caller without authentication. The second endpoint executes user-supplied code via the `exec()` function. This combination allows attackers to gain full control over default Langflow deployments. ## Impact Successful exploitation of CVE-2026-9198 can lead to complete system compromise. Attackers can execute arbitrary code, potentially accessing sensitive data or disrupting services. The CVSS score of 9.8 indicates a critical risk, making it imperative for organizations using Langflow to address this vulnerability promptly. ## Mitigation IBM has released patches for affected versions of Langflow. Organizations should update to the latest version immediately. Additionally, implement network segmentation and access controls to limit exposure to the vulnerable API endpoints. Regular security assessments can help identify and mitigate such vulnerabilities in the future.