Ai-Agent-Framework

IBM Langflow OSS Unauthenticated RCE via Auto-Login + validate/code Chain (CVE-2026-9198) new KEV EPSS 35%CVE-2026-9198webCRITICAL 9.8Patched2026-07-31Langflow Responses API IDOR — Execute Another User's Flow (CVE-2026-55255) new KEVCVE-2026-55255webHIGH 8.4Patched2026-07-19