Patch IBM Langflow now: CISA flags actively exploited CVE-2026-9198

Langflow is an open-source, visual low-code framework for building AI applications, agents, and retrieval-augmented-generation workflows. IBM owns and supports the project after acquiring DataStax in 2025, while Langflow remains available as open-source software. CVE-2026-9198 is now under active attack against default Langflow deployments, prompting CISA to add the critical remote code execution flaw to its Known Exploited Vulnerabilities catalog. IBM advises upgrading Langflow OSS to version 1.10.1 or later; version 1.11.2 is currently the newest release. Source

Läs hela artikeln hos källan.