EXPLOIT-CVE-2026-9198

CVE-2026-9198 — IBM Langflow OSS 未认证远程代码执行 针对 CVE-2026-9198 的概念验证漏洞利用程序及自包含 Docker 实验环境，该漏洞是 IBM Langflow OSS 中的一个未认证远程代码执行漏洞。 该漏洞利用程序串联两个端点——autologin（向任何人发放 SUPERUSER 令牌）和 validate/code（运行攻击者提供的 Python 代码）——以 Langflow 服务用户身份实现代码执行，无需任何凭据 。 !WARNING 仅限授权的安全测试和教育用途。...

CVE-2026-0770

🚀 CVE-2026-0770 – PoC de RCE execglobal en Langflow Vulnerabilidad de ejecución remota de código en Langflow 📌 Software afectado Esta vulnerabilidad afecta a: Langflow 🧠 Resumen de la vulnerabilidad CVE-2026-0770 es una vulnerabilidad de ejecución remota de código RCE en el endpoint: root@kitploi...

CVE-2026-9198_exploit

CVE-2026-9198 — Langflow OSS 未授权远程代码执行 在默认部署的 IBM Langflow OSS 1.0.0 – 1.10.0 中实现未授权远程代码执行。利用了两个漏洞： CVE-2026-9103 — 当 AUTOLOGIN 启用时（Langflow 1.5 中的默认设置），GET /api/v1/autologin 为任何无需凭证的调用者生成一个 SUPERUSER JWT。 CVE-2026-8481 — POST /api/v1/validate/code 将用户提供的 Python 代码传递给 exec，且无沙箱隔离。...

Langflow auto_login + validate/code Chain Unauthenticated RCE (CVE-2026-9198) (Direct Check)

Binary data langflowautologinvalidatecodercecve20269198.nbin...

Langflow 1.x.x < 1.10.1 Code Injection

The version of Langflow installed on the remote host is 1.x.x prior to 1.10.1. It is, therefore, affected by a code injection vulnerability: - IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with...

Langflow AI auto_login RCE

Langflow versions 1.10.0 and below are susceptible to unauthenticated remote code execution. By chaining /api/v1/autologin with /api/v1/validate/code, a remote unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. Module Options msf use...

EUVD-2014-9559

Malware in sbrugna...

CVE-2025-6813 aapanel WP Toolkit 1.0 - 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via auto_login() Function

The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within the autologin function in versions 1.0 to 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to bypass all role checks and gai...