CVE-2026-9198: IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke

IBM Langflow OSS versions 1.0.0 through 1.10.0 have a critical security flaw where unauthenticated attackers can chain two API endpoints together to gain full control of a system. The attackers first use /api/v1/auto_login to mint SUPERUSER tokens (special access credentials), then use /api/v1/validate/code to execute arbitrary code through exec() (a function that runs user-provided commands), achieving RCE (remote code execution, where an attacker can run commands on a system they don't own).