PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2026-9198[Critical]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-9198.

Vendor
IBM
Product
Langflow OSS
Affected versions
1.0.0 - 1.10.0
CVSS
9.8
Coverage Span
2026-07-21
Reports
1 related reports

Associated Reports & Timeline

1.
CVE-2026-9198: Langflow OSS Unauthenticated Remote Code Execution Exploit
github.com | vulnerability | Critical | | Original ↗ | .md | #ai-security | #rce | #red-team | #c2
# CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in **IBM Langflow OSS** (1.0.0 – 1.10.0) on a default deployment. Chains two flaws: * **CVE-2026-9103** —...
Why it matters: Provides a functional exploit and interactive shell chaining CVE-2026-9103 and CVE-2026-8481, highlighting severe risks of default credentials and unsandboxed execution in open-source AI workflow frameworks.