A critical vulnerability, CVE-2026-9198, has been discovered in IBM Langflow OSS, an open-source platform for building and deploying AI models. An attacker can exploit this vulnerability by bypassing auto-login authentication and executing arbitrary Python code on the host, resulting in full system control. This can be done remotely without logging in, affecting default deployments. A proof of concept exploit is publicly available on GitHub, and attacks are already underway.