{"vulnerability": "CVE-2026-9198", "sightings": [{"uuid": "808fb007-8ee6-4f07-8273-94c3173b7c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquedxsgce2v", "content": "CVE-2026-9198 - langflow oss\nIBM Langflow's default settings allow unauthorized users to run code on the system, posing a significant risk. This issue affects versions 1.0.0 through 1.10.0 of the software.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-07-17T18:18:04.827080Z"}, {"uuid": "0006300f-50ba-4924-b5cc-fc5aa77d25d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqx2jkspbj2f", "content": "\ud83d\udd34 CVE-2026-9198 - Critical (9.8)\n\nIBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_logi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9198/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T20:00:14.650205Z"}, {"uuid": "1688a9c7-6b17-4d80-a8cd-08782f4a2acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://t.me/bdufstecru/3338", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 /api/v1/validate/code, /api/v1/auto_login \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 IBM Langflow OSS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10244\nCVE-2026-9198\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.10.1:\nhttps://www.ibm.com/support/pages/node/7278927", "creation_timestamp": "2026-07-22T16:00:04.151980Z"}, {"uuid": "11892f19-3508-4bfb-8cdc-a3ce9349745d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-9198", "content": "", "creation_timestamp": "2026-07-22T16:15:17.908629Z"}, {"uuid": "014a3ad2-3aa0-4175-a0b0-06ab08ed58e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "Telegram/wu7ZwWUDhyI14H4kQ3LWs1KWN75IcQ-iWlf3DfK8jhFVpKA", "content": "", "creation_timestamp": "2026-07-22T17:00:04.905389Z"}]}