Unauthenticated remote code execution in Langflow OSS (CVE-2026-9198)

CVE-2026-9198 is an unauthenticated remote code execution vulnerability in Langflow OSS affecting all default deployments. An unauthenticated attacker can obtain a superuser bearer token via the /api/v1/auto_login endpoint, then submit arbitrary Python code to the /api/v1/validate/code endpoint, which executes it via exec(); Python decorators, default arguments, and annotations are evaluated at function definition time, enabling full command execution on the host. The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Affected versions: - 1.0.0-1.10.0 We recommend updating to: 1.10.1. CVSS 9.8 · our assessment: act_now Vendor advisory: https://www.ibm.com/support/pages/node/7278927 Details: https://vuln.today/cve/CVE-2026-9198