0xgh057r3c0n/CVE-2026-9198

PoC

IBM Langflow Unauthenticated RCE via Auto-Login Bypass

view exploit source poc_in_githubauthor 0xgh057r3c0npublished 2026-07-24catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-9198US	—OT critical	28.7% (98th)	KEV	2026-07-17
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (execut…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.