[KEV] CVE-2026-9198 -- CVSS 0.0 Vulnerability Briefing

[KEV] CVE-2026-9198 | CVSS 0.0 (Low) | Exploit: Operational

What Is It

CVE-2026-9198 is an unauthenticated code injection vulnerability in IBM Langflow that affects default deployments exposed to an attacker.

Technical Detail

The flaw allows an unauthenticated attacker to inject and execute code through the Langflow attack surface without first obtaining valid credentials. Successful exploitation results in full remote code execution on the affected Langflow deployment, potentially allowing an attacker to run commands, access application data and credentials, and use the compromised host for further activity.

Exploitation Status

Exploit maturity is assessed as Operational, meaning exploitation methods are sufficiently developed for practical use by threat actors. CISA has confirmed active exploitation in the wild. CVE-2026-9198 was added to the CISA Known Exploited Vulnerabilities catalog on August 4, 2026.

Who Is Targeting This

No specific threat actor attribution at this time.

What To Do

Treat this as an urgent remediation issue for all IBM Langflow deployments, particularly instances reachable from the internet or operating with default configurations. Apply the vendor-provided security update or move to a fixed release as soon as it is available. CISA binding directive guidance requires federal civilian agencies to patch by August 25, 2026, or apply mitigations if patching is not feasible. Until remediation is complete, remove Langflow from public exposure where possible, restrict access to trusted administrative networks, place the service behind strong authentication controls, and monitor Langflow hosts for unexpected process execution, command shells, new scheduled tasks, altered application files, and unusual outbound network connections. Specific indicators of compromise have not been provided.