
AI
that AI agent builder you self-hosted? attackers don't even need a password to take it over
CVE-2026-9198 lets anyone run code on a default Langflow install with zero credentials — CISA gave federal agencies two days to patch it.
Lena Fischer · 1h ago · 6 min