CVE-2026-9198

This repository contains a Nuclei YAML template that detects and exploits CVE-2026-9198, an unauthenticated remote code execution vulnerability in IBM Langflow OSS 1.0.0 through 1.10.0. The template chains two API endpoints to obtain a superuser JWT and execute arbitrary Python code via the code validation endpoint.

This exploit chains two vulnerabilities (CVE-2026-9103 and CVE-2026-8481) in IBM Langflow OSS to achieve unauthenticated remote code execution. It first bypasses authentication via the `/api/v1/auto_login` endpoint to obtain a superuser JWT token, then injects arbitrary Python code via the `/api/v1/validate/code` endpoint for command execution.

This repository contains a functional proof-of-concept exploit for CVE-2026-9198, an unauthenticated remote code execution vulnerability in IBM Langflow OSS 1.0.0 through 1.10.0. The exploit chains an auto-login bypass (via /api/v1/auto_login) with arbitrary Python code execution (via /api/v1/validate/code) to achieve RCE.

Exploits a chained unauthenticated RCE in IBM Langflow OSS by first obtaining a superuser JWT via CVE-2026-9103 (auto_login endpoint), then leveraging CVE-2026-8481 (validate/code endpoint) to execute arbitrary Python code via exec() with no sandboxing. The PoC demonstrates command execution, interactive shell, and reverse shell capabilities.