What is CVE-2026-9196?

CVE-2026-9196 is a high-severity vulnerability in IBM Langflow Oss, classified under Code Injection. CVSS score: 8.1/10. Published 2026-08-05.

How severe is CVE-2026-9196?

High severity. CVSS v3 base score is 8.1 out of 10.

RCE in IBM Langflow Oss

CVE-2026-9196

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user approval, which may allow an attacker to trigger side effects such as outbound network access, file system interaction, or data exfiltration with the privileges of the Langflow backend process.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Ibm Langflow Oss — versions 1.0.0
Langflow

Weakness classification (CWE)

CWE-94 — Code Injection

References

psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)

Frequently asked questions

What is CVE-2026-9196?: CVE-2026-9196 is a high-severity vulnerability in IBM Langflow Oss, classified under Code Injection. CVSS score: 8.1/10. Published 2026-08-05.
How severe is CVE-2026-9196?: High severity. CVSS v3 base score is 8.1 out of 10.