CISA Mandates Patching for IBM Langflow Vulnerability

A critical vulnerability in IBM's Langflow platform has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog, triggering a mandatory deadline for federal agencies to patch or disconnect affected instances by August 7, 2026.

The CVE-2026-9198 vulnerability allows unauthenticated attackers to achieve full remote code execution (RCE) with a CVSS score of 9.8.

Langflow is a Python-based visual interface for constructing and executing AI-powered agent workflows, and the successful RCE compromise grants an attacker total control over the system, including the ability to manipulate agent workflows themselves.

The attack mechanism involves chaining two default API endpoints: /api/v1/auto_login and /api/v1/validate/code. The exploit functions on default deployments out of the box.