IBM Langflow Vulnerability Sparks Deadline for Federal Agencies

Federal agencies have until August 7 to remediate or disconnect assets affected by a critical vulnerability in IBM Langflow, tracked as CVE-2026-9198.

The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to achieve full remote code execution (RCE) by chaining two default API endpoints.

Langflow's AI-powered agent workflows can be compromised if the attacker gains access through the /api/v1/auto_login endpoint and then executes arbitrary Python code via exec().

The CISA Known Exploited Vulnerabilities catalog added Langflow RCE CVE-2026-9198 on August 4, 2026, under Binding Operational Directive (BOD) 26-04.

Organizations running Langflow in production must act immediately to upgrade to Langflow 1.10.2 and restrict network exposure of the Langflow API, as proof-of-concept code for this vulnerability was published in July 2026 and active exploitation has been observed.