What is the CVSS score of CVE-2026-9202?

CVE-2026-9202 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Which versions of IBM Langflow are affected by CVE-2026-9202?

IBM Langflow OSS versions 1.0.0-1.10.0 contain an unauthenticated account registration flaw enabling remote code execution when the NEW_USER_IS_ACTIVE configuration option is enabled.. A patch is available.

How to fix or mitigate CVE-2026-9202?

Within 24 hours, identify all internet-facing IBM Langflow instances and apply the latest patched version immediately. Within 7 days, verify patch deployment across all affected systems, audit authentication logs for suspicious account registrations created during the vulnerability window, and review any user accounts registered before patching for unauthorized access. Within 30 days, implement network segmentation to restrict direct internet access to Langflow instances, disable NEW_USER_IS_ACTIVE unless operationally required, and conduct a post-incident review of system access logs for evidence of exploitation.

IBM Langflow CVE-2026-9202

EUVD-2026-45235 CRITICAL

Missing Authentication for Critical Function (CWE-306)

2026-07-17 ibm

IBM Authentication Bypass Langflow Oss

9.8

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

CRITICAL

qualitative

NVD

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.1 HIGH

Account creation is unauthenticated and network-reachable (AV:N/PR:N), but full RCE impact depends on the non-default NEW_USER_IS_ACTIVE=true option, warranting AC:H over the vendor's AC:L.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 17, 2026 - 18:15 vuln.today

CVE Published

Jul 17, 2026 - 17:33 cve.org

CRITICAL 9.8

DescriptionNVD

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployment option), newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need for AUTO_LOGIN.

AnalysisAI

Missing authentication in IBM Langflow OSS 1.0.0 through 1.10.0 lets unauthenticated remote attackers register unlimited user accounts against any exposed instance. When the documented NEW_USER_IS_ACTIVE=true option is set, those accounts become immediately active and can log in to reach known remote-code-execution endpoints, providing a full authentication foothold without relying on AUTO_LOGIN. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Reach exposed Langflow HTTP endpoint

Delivery

Call unauthenticated registration API

Exploit

Create immediately-active account (NEW_USER_IS_ACTIVE=true)

Execution

Authenticate with self-made credentials

Persist

Invoke flow-execution endpoint

Impact

Achieve remote code execution on host

Access

Reach exposed Langflow HTTP endpoint

Delivery

Call unauthenticated registration API

Exploit

Create immediately-active account (NEW_USER_IS_ACTIVE=true)

Execution

Authenticate with self-made credentials

Persist

Invoke flow-execution endpoint

Impact

Achieve remote code execution on host

Vulnerability AssessmentAI

Exploitation	The unauthenticated account-creation flaw requires only network reachability to the Langflow HTTP interface - no credentials, no user interaction (AV:N/AC:L/PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The supplied CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) describes trivially reachable, unauthenticated, high-impact exploitation, and CWE-306 corroborates a missing-auth root cause. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker locates an internet-exposed Langflow instance and repeatedly calls the unauthenticated registration endpoint to create one or more accounts. On an instance running NEW_USER_IS_ACTIVE=true, the attacker immediately logs in with a self-created account and invokes Langflow's flow-execution endpoints to achieve remote code execution on the host. …
Remediation	Patch available per vendor advisory - upgrade to the fixed IBM Langflow OSS release identified in the IBM advisory at https://www.ibm.com/support/pages/node/7278929 (no exact fixed version number is provided in the input data, so confirm the target build against that advisory). … Detailed patch versions, workarounds, and compensating controls in full report.