---
id: 9085
title: "CVE-2026-9198: Langflow OSS Unauthenticated Remote Code Execution Exploit"
cve: CVE-2026-9198
cvss: 9.8
severity: critical
vendor: "IBM"
product: "Langflow OSS"
affected_versions: "1.0.0 - 1.10.0"
source_domain: github.com
source_url: "https://github.com/0xdak/cve-2026-9198_exploit"
published_at: "2026-07-21T11:14:59Z"
tags: ["ai-security", "rce", "red-team", "c2", "browser", "security", "service-worker", "slcyber"]
phying_url: "https://phying.com/item/9085"
lang: en
---

# CVE-2026-9198: Langflow OSS Unauthenticated Remote Code Execution Exploit

## Summary

# CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in **IBM Langflow OSS** (1.0.0 – 1.10.0) on a default deployment. Chains two flaws: * **CVE-2026-9103** —...

## Why it matters

Provides a functional exploit and interactive shell chaining CVE-2026-9103 and CVE-2026-8481, highlighting severe risks of default credentials and unsandboxed execution in open-source AI workflow frameworks.

## Intelligence Metadata

- **Sources:** github.com
- **CVE:** CVE-2026-9198
- **CVSS:** 9.8
- **Vendor:** IBM
- **Product:** Langflow OSS
- **Affected versions:** 1.0.0 - 1.10.0
- **Published:** 2026-07-21T11:14:59Z
- **Original:** https://github.com/0xdak/cve-2026-9198_exploit
- **Phying News:** https://phying.com/item/9085