Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.

CVE-2026-9198 is a critical code injection vulnerability affecting IBM Langflow. The flaw allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments, requiring no prior authentication or privileges. CISA has flagged this vulnerability under BOD 26-04, which prioritizes security updates based on risk. IBM has published an official support advisory with remediation guidance. The vulnerability is tracked in the NVD and organizations running Langflow are urged to apply patches immediately. The wide exposure of default deployments significantly increases the attack surface and potential impact.