CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote

The article reports that CISA has added multiple Langflow remote code execution (RCE) vulnerabilities to its Known Exploited Vulnerabilities catalog, confirming active exploitation of this open-source platform used to build AI agents and workflows.[1][10][13] These flaws arise from unsafe execution of attacker-controlled Python code in public flows and other endpoints, allowing unauthenticated attackers to fully compromise Langflow hosts that underpin AI applications.[1][6][9][13] From a RealGround perspective, this highlights a critical AI supply chain risk: organizations may be unknowingly deploying vulnerable Langflow components inside their AI agent stacks, exposing core infrastructure, data, and downstream integrated systems to takeover via AI orchestration layers. Practically, teams need SBOM-based inventory of Langflow usage, enforced patching baselines, hardened deployment patterns for AI agent platforms, and secure build guidance to prevent unsafe code execution paths in custom AI agents and workflows.