{"uuid": "03a1969e-3859-4d12-bc1c-6271b4300802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9198", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3msbqbznk2s2s", "content": "\ud83d\udd34 EXPLOITED\n\nLangflow, the popular AI workflow builder, has a critical flaw (CVE-2026-9198): its auto-login endpoint hands any stranger an admin token, then a second endpoint runs their code.\n\nCISA says it's exploited now. Update past 1.10.0 and disable auto-login.", "creation_timestamp": "2026-08-04T19:21:33.859571Z"}