IBM Langflow CVE-2026-9202

The unauthenticated account-creation flaw requires only network reachability to the Langflow HTTP interface - no credentials, no user interaction (AV:N/AC:L/PR:N/UI:N). The high-impact RCE outcome specifically requires the deployment to have NEW_USER_IS_ACTIVE=true set, which makes attacker-created accounts immediately active and able to authenticate; without that setting the accounts are not immediately usable, which is the key limiting factor. Affected versions are constrained to IBM Langflow OSS 1.0.0-1.10.0, and full impact also assumes the instance's flow/code-execution endpoints are reachable to authenticated sessions (their default availability).

The supplied CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) describes trivially reachable, unauthenticated, high-impact exploitation, and CWE-306 corroborates a missing-auth root cause. However, the description makes the highest-impact outcome (immediately-active accounts reaching RCE) conditional on NEW_USER_IS_ACTIVE=true, a non-default documented option - so on a default instance the raw account-creation flaw alone is lower impact (account flooding/DoS-style abuse) than the 9.8 implies. No EPSS score, KEV listing, or POC is present in the input, so there is no evidence of active exploitation or public exploit code; risk is driven by the unauthenticated network vector and the ease of the underlying flaw rather than by observed in-the-wild activity. Priority: high for any internet-exposed Langflow instance, and critical specifically where NEW_USER_IS_ACTIVE=true is configured.

An attacker locates an internet-exposed Langflow instance and repeatedly calls the unauthenticated registration endpoint to create one or more accounts. On an instance running NEW_USER_IS_ACTIVE=true, the attacker immediately logs in with a self-created account and invokes Langflow's flow-execution endpoints to achieve remote code execution on the host. No public exploit is identified in the provided data, but the low-complexity, network-reachable vector makes the chain straightforward to automate.