
Langflow's Two-Call Chain Handed Root to 295 Attackers
CVE-2026-9198 chains two Langflow API calls into unauthenticated root access. CISA confirmed active exploitation; 756 attempts from 295 IPs logged by August 12. Why shadow AI tooling is the real gap.









