CVE-2026-9198

CVE-2026-9198 - Неаутентифицированный RCE в IBM Langflow через обход автоматического входа учебный PoC Этот репозиторий содержит учебный proof of concept для CVE-2026-9198 , затрагивающего IBM Langflow OSS. PoC poc.py демонстрирует, как неаутентифицированный злоумышленник может объединить в...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — Langflow Exécution de code à distance RCE non authentifiée Aperçu Identifiant CVE : CVE-2026-33017 Logiciel concerné : Langflow Versions vulnérables : = 1.9.0 Gravité : Critique Auteur : r3nsi15 Date : 2026 Description Langflow expose un point de terminaison public de constructio...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS - RCE non authentifiée via contournement de l'auto-connexion 📋 Aperçu CVE-2026-9198 est une vulnérabilité critique d'exécution de code à distance RCE non authentifiée dans IBM Langflow OSS. Cet exploit combine deux vulnérabilités : CVE-2026-9103 : Contournement de...

CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with /api/v1/validate/code executes user code via exec to achieve full RCE on default Langflow deployments...

CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with /api/v1/validate/code executes user code via exec to achieve full RCE on default Langflow deployments...

CVE-2026-9202

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEWUSERISACTIVE=true documented deployment option, newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need...