PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-9198: Langflow OSS Unauthenticated Remote Code Execution Exploit

github.com | vulnerability | Critical | CVE-2026-9198 | #ai-security | #rce | #red-team | #c2 | #browser | #security | #service-worker | #slcyber
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in **IBM Langflow OSS** (1.0.0 – 1.10.0) on a default deployment. Chains two flaws: * **CVE-2026-9103** —...

Why it matters

Provides a functional exploit and interactive shell chaining CVE-2026-9103 and CVE-2026-8481, highlighting severe risks of default credentials and unsandboxed execution in open-source AI workflow frameworks.
CVE
CVE-2026-9198
Vendor
IBM
Product
Langflow OSS
Affected versions
1.0.0 - 1.10.0
CVSS
9.8
Published
Collected

Related coverage

Critical · vulnerability · github.com
CVE-2026-111497: Unauthenticated WordPress RCE Exploit Chain PoC via Brotli Decoder Flaw
Demonstrates a reliable, real-world weaponization of the Brotli decoder memory corruption flaw in web application environments without requiring information leaks or debugging instrumentation. Highlights the critical risk of untrusted compressed streams in server-side HTTP clients.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · aikido.dev
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
Node.js shipped a security update on Wednesday for a flaw in how it decompresses Brotli data, a bug people are already calling Node2Shell (CVE-2026-111497). If an attacker can get a malicious payload in front of your app, the flaw can crash the process, leak part of its memory, or potentially let them run their own code.
tool · github.com
Brotli Client Checker: Test Server for Brotli Decoder Vulnerability (CVE-2026-111497)
Provides security teams and developers with a simple, zero-dependency mechanism to test whether backend microservices, crawlers, and HTTP clients are susceptible to the widespread Node2Shell/HTTP2Shell Brotli decoder flaw.
tool · github.com
node2shell-scanner: High-Fidelity Remote Detection Tool for Node.js Brotli OOB Write (CVE-2026-111497)
Provides defenders and security teams with a safe, non-destructive, and high-fidelity method to scan large attack surfaces and confirm Node.js exposure to the critical Brotli decoder flaw.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
Back