EDB-52675

PoC

Langflow 1.10.0 - RCE

view exploit source exploit_dbtype webappsauthor Richard Howepublished 2026-09-02catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-9198US	—OT critical	28.7% (98th)	KEV	2026-07-17
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (execut…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.