CISA Gives Federal Agencies Three Days to Patch Critical Langflow Flaw

The U.S. Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalog sets mandatory remediation priorities for federal agencies and serves as a widely watched warning list for companies. The latest additions affect IBM Langflow, N-central and Apache Tomcat, exposing risks across AI application development, IT management and web server infrastructure as attackers increasingly target widely deployed enterprise software.

CISA added three critical vulnerabilities to the catalog after confirming they were being actively exploited. The most severe is CVE-2026-9198, a code-injection flaw in Langflow carrying a CVSS score of 9.8. It could allow an unauthenticated remote attacker to execute arbitrary code on an affected system. U.S. federal civilian agencies have been directed to apply required mitigations or discontinue vulnerable products by Aug. 7, 2026.

Langflow is an open-source development tool for building large language model (LLM) applications and is often connected to cloud services, models and data sources. If remotely compromised, it could give attackers access to AI infrastructure and sensitive credentials, extending the impact beyond a single host.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned in July 2026 that CVE-2026-33017 was being actively exploited. The vulnerability has a CVSS score of 9.3 and affects Langflow versions before 1.8.1. Attackers have used it to steal AI and cloud access keys and mine Monero, and users should upgrade to version 1.9.0 as soon as possible.