VulnerabilitiesNov 2, 2026

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Critical Langflow flaws allow unauthenticated remote code execution and auth bypass.

Two critical vulnerabilities in Langflow, affecting versions 1.0.0 through 1.12.8, allow unauthenticated remote attackers to bypass authentication or execute arbitrary code. One flaw, CVE-2026-93680, is an authentication bypass exploitable through the Model Context Protocol, while CVE-2026-110186 enables arbitrary code execution. A Metasploit module already exists for CVE-2026-93680. The default `LANGFLOW_AUTO_LOGIN` setting in version 1.12.8 further exacerbates the risk by logging users in as superusers. The only fix is upgrading to version 1.13.0.

AI summary of the linked source. Not reviewed by an editor. How this works

Read at source

Vendor Watch

Run IBM?

Get an email when a new story names IBM, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works Privacy

The lesson from this incident

Full lesson

Two critical vulnerabilities in Langflow (CVE-2026-93680 and CVE-2026-110186) allow unauthenticated attackers to bypass authentication and execute arbitrary code on affected servers running versions 1.0.0 through 1.12.8. The situation is compounded by a dangerous default configuration — `LANGFLOW_AUTO_LOGIN` — that automatically grants superuser access, dramatically widening the attack surface. The availability of a public Metasploit module means exploitation requires minimal skill, making unpatched instances trivial targets. This incident highlights how insecure defaults combined with delayed patching create critical, easily exploitable windows of exposure.

What helps against this

How we list vendors

Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
For exampleHuntress Managed ITDR CrowdStrike Falcon Identity Protection Okta Identity Threat Protection all options
Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
For exampleTenable Vulnerability Management Axonius Exposures Rapid7 Exposure Command (InsightVM)all options
Automated patch management
Known holes get closed in days, not months.
For exampleManageEngine Patch Manager Plus Ivanti Neurons for Patch Management Microsoft Intune all options

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

cve — CVE-2026-93680
cve — CVE-2026-110186
cve — CVE-2026-110193
cve — CVE-2026-110192
cve — CVE-2026-104339

Entities

Langflow (product)IBM (vendor)AI agents (technology)Artificial Intelligence (technology)