A security vulnerability has been identified in IBM Langflow, a low-code application building tool that some users host on our platforms. The flaw is a code injection issue, which allows outside actors to run unauthorized, harmful code on the server where Langflow is installed.
This vulnerability is especially serious because attackers do not need any existing login credentials for your Langflow setup to exploit it. On default Langflow deployments, a successful attack grants the attacker full control over the server, meaning they could access, modify, or delete your data, disrupt your website or application services, or use the compromised server for further malicious activity.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-9198
