Executive Summary
CISA added Langflow code injection CVE-2026-9198 (CVSS 9.8), Tomcat and N-central flaws to KEV on August 5, 2026.
What Happened
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote
Affected Products
- Langflow
- Apache Tomcat
- N-able N-central
Vulnerability / Attack Technique
Exploited vulnerabilities including AI workflow RCE
Technical Mechanism
Unauthenticated code injection in Langflow.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Langflow keeps appearing in KEV. RealGround analysis: treat AI workflow builders as high-risk internet services.
Recommended Controls
- Update Langflow
- Restrict Langflow access
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.