What is CVE-2026-9196?

CVE-2026-9196 is a high-severity vulnerability in Ibm Langflow Oss, classified under Code Injection. CVSS score: 8.1/10. Published 2026-08-05.

How severe is CVE-2026-9196?

High severity. CVSS v3 base score is 8.1 out of 10.

RCE in Ibm Langflow Oss

CVE-2026-9196

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Pytho…

Vulnerability class: RCE (Remote Code Execution)

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Ibm Langflow Oss — versions 1.0.0

Weakness classification (CWE)

CWE-94 — Code Injection

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-9196?: CVE-2026-9196 is a high-severity vulnerability in Ibm Langflow Oss, classified under Code Injection. CVSS score: 8.1/10. Published 2026-08-05.
How severe is CVE-2026-9196?: High severity. CVSS v3 base score is 8.1 out of 10.