IBM Langflow Auto-Login Bypass Probes (CVE-2026-9198) for 2026-10-22
Last Updated: 00:00 UTC
CVE-2026-9198 is an authentication bypass in IBM Langflow: the /api/v1/auto_login endpoint issues a session without credentials, giving access to flows that can execute arbitrary Python. These IPs requested that endpoint on our reverse proxy.
CVE References
MITRE ATT&CK
Tactic: Initial Access (TA0001)
Technique: T1190 — Exploit Public-Facing Application
Observed URIs
Attackers by Country
| France | 12 | 100.0% |
IP Address : ASN : City/Provider
-
185.177.72.100 : AS211590 Bucklog SARL : France
-
185.177.72.11 : AS211590 Bucklog SARL : France
-
185.177.72.12 : AS211590 Bucklog SARL : France
-
185.177.72.17 : AS211590 Bucklog SARL : France
-
185.177.72.22 : AS211590 Bucklog SARL : France
-
185.177.72.23 : AS211590 Bucklog SARL : France
-
185.177.72.30 : AS211590 Bucklog SARL : France
-
185.177.72.38 : AS211590 Bucklog SARL : France
-
185.177.72.53 : AS211590 Bucklog SARL : France
-
185.177.72.54 : AS211590 Bucklog SARL : France
-
185.177.72.68 : AS211590 Bucklog SARL : France
-
185.177.72.70 : AS211590 Bucklog SARL : France