CISA added Langflow CVE-2026-9198 to KEV. Self-hosted Langflow OSS 1.0.0 through 1.10.0 should move to 1.10.1 and review service exposure and connected credentials.