CVE-2026-9198

This PoC exploits an authentication bypass (auto-login token leakage) and subsequent arbitrary Python code execution in IBM Langflow OSS versions 1.0.0 to 1.10.0. The exploit retrieves a superuser token via /api/v1/auto_login and submits malicious Python code to /api/v1/validate/code, which executes the payload via exec().

The repository claims to be an exploit for CVE-2026-9198 (IBM Langflow) but contains only a password-protected ZIP file with obfuscated Python code and a README directing users to an external YouTube video for the password. No technical details or legitimate exploit code are present.

This PoC exploits an RCE vulnerability in Langflow <1.10.0 by leveraging an auto-login endpoint to obtain a SUPERUSER token, then injecting arbitrary Python code via a crafted request to the `/api/v1/validate/code` endpoint. The exploit executes system commands through Python's subprocess module.

This repository contains a Nuclei YAML template that detects and exploits CVE-2026-9198, an unauthenticated remote code execution vulnerability in IBM Langflow OSS 1.0.0 through 1.10.0. The template chains two API endpoints to obtain a superuser JWT and execute arbitrary Python code via the code validation endpoint.

This exploit chains two vulnerabilities (CVE-2026-9103 and CVE-2026-8481) in IBM Langflow OSS to achieve unauthenticated remote code execution. It first bypasses authentication via the `/api/v1/auto_login` endpoint to obtain a superuser JWT token, then injects arbitrary Python code via the `/api/v1/validate/code` endpoint for command execution.

This repository contains a functional proof-of-concept exploit for CVE-2026-9198, an unauthenticated remote code execution vulnerability in IBM Langflow OSS 1.0.0 through 1.10.0. The exploit chains an auto-login bypass (via /api/v1/auto_login) with arbitrary Python code execution (via /api/v1/validate/code) to achieve RCE.

Exploits a chained unauthenticated RCE in IBM Langflow OSS by first obtaining a superuser JWT via CVE-2026-9103 (auto_login endpoint), then leveraging CVE-2026-8481 (validate/code endpoint) to execute arbitrary Python code via exec() with no sandboxing. The PoC demonstrates command execution, interactive shell, and reverse shell capabilities.