CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

Ravie LakshmananAug 05, 2026Vulnerability / Patch Management

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.

The list of vulnerabilities is as follows -

CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. (Fixed in July 2026 with version 1.10.1)

CVE-2026-34486 (CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes. (Fixed in April 2026 with versions 11.0.21, 10.1.54, and 9.0.117)

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

Other newsrooms on this story

Related reading

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

CISA orders urgent action on actively exploited Langflow RCE flaw

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active…