
- Home
- Cyber Alerts
- NCSC-VD-2608-001-02
NCSC-VD-2608-001-02
Severity Level: Critical
Reference No.: NCSC-VD-2608-001-02
IBM
Description
CVE-2026-9198: Code injection allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. IBM confirms versions 1.0.0 through 1.10.0 are affected.
Vulnerabilities
- CVE-2026-9198
Code injection allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. IBM confirms versions 1.0.0 through 1.10.0 are affected.

