[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyH20uADjbiHaDxz1T-K0zy_Xx3BbW9kztwUTAVPaUVw":3},{"article":4,"iocs":51,"watch_terms":68,"solutions":69,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"48add025-e7ad-42fb-b303-de9208746547","Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers","critical-langflow-flaws-could-let-unauthenticated-attackers-run-code-on-servers-0bed56","Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version 1.13.0. Neither flaw is in CISA's Known","Two critical vulnerabilities in Langflow, affecting versions 1.0.0 through 1.12.8, allow unauthenticated remote attackers to bypass authentication or execute arbitrary code. One flaw, CVE-2026-93680, is an authentication bypass exploitable through the Model Context Protocol, while CVE-2026-110186 enables arbitrary code execution. A Metasploit module already exists for CVE-2026-93680. The default `LANGFLOW_AUTO_LOGIN` setting in version 1.12.8 further exacerbates the risk by logging users in as superusers. The only fix is upgrading to version 1.13.0.","Critical Langflow flaws allow unauthenticated remote code execution and auth bypass.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F11\u002Fcritical-langflow-flaws-could-let.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi_FF2_yXQrxnB1ymo-GsohY6t0INslV7mps2DVMnYa_dD_RpZu7uz9HwNrux1gxieMF4hnc_84KMpOyhroj0EDx0Vwv0QljdhTehvJINIsr-Sjyw4CaMiLO3fFWGl-8LhLWgOtC4DRU2X5e46s3Rxghu3KLUMsyHfpxFyKogIs34Q2fm2RYpAMI_Jt_9A\u002Fs1600\u002Flangflow-rce.jpg","2026-11-02T11:50:00+00:00","2026-11-02T14:00:24.784787+00:00",9,[17,20,23,26],{"name":18,"type":19},"Langflow","product",{"name":21,"type":22},"IBM","vendor",{"name":24,"type":25},"AI agents","technology",{"name":27,"type":25},"Artificial Intelligence","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,36,41,46],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[52,56,59,62,65],{"type":53,"value":54,"context":55},"cve","CVE-2026-93680","Critical authentication bypass vulnerability",{"type":53,"value":57,"context":58},"CVE-2026-110186","Critical arbitrary code execution vulnerability",{"type":53,"value":60,"context":61},"CVE-2026-110193","High severity vulnerability allowing OS command execution",{"type":53,"value":63,"context":64},"CVE-2026-110192","Medium severity vulnerability for credential exfiltration",{"type":53,"value":66,"context":67},"CVE-2026-104339","High severity vulnerability allowing arbitrary code execution",[21,18],{"controls":70,"vendors":158},[71,100,129],{"slug":72,"name":73,"problem":74,"products":75},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":101,"name":102,"problem":103,"products":104},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":130,"name":131,"problem":132,"products":133},"patch-management","Automated patch management","Known holes get closed in days, not months.",[134,142,150],{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":151,"vendor_name":152,"vendor_logo":153,"product_slug":154,"product_name":155,"url":156,"description":157},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",[],{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":171},"critical-langflow-flaws-enable-unauthenticated-remote-code-execution","Critical Langflow Flaws Enable Unauthenticated Remote Code Execution","Two critical vulnerabilities in Langflow (CVE-2026-93680 and CVE-2026-110186) allow unauthenticated attackers to bypass authentication and execute arbitrary code on affected servers running versions 1.0.0 through 1.12.8. The situation is compounded by a dangerous default configuration — `LANGFLOW_AUTO_LOGIN` — that automatically grants superuser access, dramatically widening the attack surface. The availability of a public Metasploit module means exploitation requires minimal skill, making unpatched instances trivial targets. This incident highlights how insecure defaults combined with delayed patching create critical, easily exploitable windows of exposure.",[164,165,166,167,168,169,170],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIS2 Article 21(2)(b)","PCI DSS Requirement 6",{"NIS2 Article 21(2)(b)":172,"PCI DSS Requirement 6":173,"NIST SP 800-53 SI-2: Flaw Remediation":174,"OWASP A06:2021 Vulnerable and Outdated Components":175,"CIS Control 7: Continuous Vulnerability Management":176,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":177,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":178},"NIS2 mandates incident handling and vulnerability management practices for essential and important entities; the existence of a public Metasploit module for these flaws makes timely patching a direct compliance obligation under this article.","Requirement 6 mandates the development and maintenance of secure systems and software, including prompt installation of security patches, which would have required upgrading Langflow to 1.13.0 before attackers could leverage the published exploits.","SI-2 requires organisations to identify, report, and correct information system flaws promptly; applying this control would have mandated an urgent upgrade to Langflow 1.13.0 as soon as the CVEs were published.","Running Langflow versions 1.0.0–1.12.8 with known critical CVEs is a textbook instance of this risk category, underscoring the need to track component versions and update them before public exploits emerge.","A continuous vulnerability management process would have identified the critical Langflow CVEs immediately upon disclosure and enforced timely remediation before public exploits like the Metasploit module could be weaponised against unpatched instances.","This control explicitly requires organisations to obtain timely information about technical vulnerabilities and take appropriate action, which would have driven immediate patching or mitigation of these critical Langflow flaws.","The authentication bypass flaw and the auto-login superuser default directly violate this control, which requires robust identity management and access control mechanisms to prevent unauthenticated access to systems."]