exploit/multi/http/langflow_unauth_rce_cve_2026_9198

weaponized

Langflow AI auto_login RCE

view exploit source metasploittype exploitpublished 2026-07-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-9198US	—OT critical	28.7% (98th)	KEV	2026-07-17
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (execut…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.