CuteeCat/CVE-2026-9198 ? reverse-engineered prompt

Build me a small Python proof of concept that demonstrates this Langflow vulnerability in a safe local test setup.

I want a script that can talk to a target Langflow instance, check whether autologin is enabled, grab the token from the auto login endpoint if it is, and then send a test request to the code validation endpoint to show that submitted code gets compiled and executed. Keep it simple and easy to run from the command line, with the target URL as an input and clear output that explains whether the instance looks vulnerable.

Please make it practical for lab use, with good error handling, readable logs, and a short README explaining how to run it against a local or test deployment. If you need to look up current endpoint details or request formats online, do that.