Firetruck

CVE-2026-9198

KEV
Updated Aug 17, 2026 · PUBLISHED
View KEV entry →

Description

Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Langflow OSSIBM / Langflow OSS>= 1.0.0, <= 1.10.0affected