A security vulnerability has been identified in IBM Langflow, a tool for building workflows and applications that some hosting clients may run on their accounts. The flaw is a code injection issue, which allows unauthenticated attackers (people who do not have valid login credentials for your Langflow instance) to run their own custom code on servers running default Langflow deployments. Full remote code execution means attackers could gain complete, unrestricted control of the affected server. This puts any data, services, or other content hosted on that server at risk of being accessed, altered, stolen, or disrupted by bad actors.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-9198
