Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

This wrap-up comes from the beautiful country of Belgium, where the Metasploit team is team-building and team-eating while we cheer on our very own teammates giving talks - shout-out to @jburgess-r7 who gave a wonderful talk about some of his 0day research.

Team building is a wonderful corporate ritual in which security researchers — people whose job is to break stuff and find ways into places they shouldn't be — are released into hotels full of questionable tech, and then everyone acts surprised by what happens next. So far, the only leak has been the Manneken Pis.

Anyway, while we were busy learning that a country with three official languages still has zero words for "one waffle is enough," the internet continued to be on fire.

We’re gonna jump right into the deep end. GitLab. Unauthenticated. Arbitrary file read. Exploited in the wild. That’s it. If you're reading this and your self-hosted GitLab is running anything from 18.7 up to the fixed versions, please stop reading and go patch.

Next, for anyone who has ever wanted to become the DNS server for an entire Windows network without the hassle of asking permission, we now have native mitm6-style DHCPv6 and IPv6 RA DNS takeover modules. Remember that IPv6 stack you never configured, never use, and definitely never disabled? Windows remembers. Windows is very happy to accept a new DNS server from a stranger who asks nicely.

And finally, Langflow brings us authenticated RCE via custom components, continuing the proud AI-industry tradition of building a feature that lets users run arbitrary Python and then being shocked when users run arbitrary Python.

New module content (5)

GitLab Unauthenticated Arbitrary File Read

Authors: guneykabel, jheysel-r7, and s3ntago

Type: Auxiliary

Pull request: #21910 contributed by jheysel-r7

Path: gather/gitlab_file_read_cve_2026_85706

CVE reference: CVE-2026-85706

Description: Adds a module that exploits CVE-2026-85706, an unauthenticated local file read in the GitLab repository commits and files APIs. The issue affects GitLab CE and EE versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2.

DHCPv6 DNS Takeover (mitm6-style IPv6 DNS coercion)

Author: Pushpender Rathore

Type: Auxiliary

Pull request: #21725 contributed by Pushpenderrathore

CVE reference: CVE-2026-20929

Description: This adds the auxiliary/spoof/ipv6/ipv6_ra_dns_takeover and auxiliary/spoof/dhcp/dhcpv6_dns_takeover modules to enable native IPv6 DNS-takeover coercion as part of a Kerberos authentication relay attack chain. Operating as a rogue IPv6 router and a rogue DHCPv6 server respectively, these modules trick modern Windows and RFC 8106 clients into adopting the attacker as their recursive DNS server.

This PR adds the following modules:

• spoof/dhcp/dhcpv6_dns_takeover
• spoof/ipv6/ipv6_ra_dns_takeover

Langflow AI Custom Component Authenticated RCE

Author: Richard Howe <rhowe425>

Type: Exploit

Pull request: #21848 contributed by rmhowe425

Path: multi/http/langflow_auth_rce_cve_2026_18729

CVE reference: CVE-2026-18729

Description: This adds a new exploit module that detects and exploits an authenticated remote code execution vulnerability tracked as CVE-2026-18729 impacting Langflow versions 1.11.1 and below.

Kate Plugin Persistence

Author: h00die

Type: Exploit

Pull request: #21461 contributed by h00die

Path: multi/persistence/kate_plugin

Description: This adds a multi platform persistence module for Kate.

Enhanced Modules (1)

Modules which have either been enhanced, or renamed:

• #21770 from e2002e - This updates the ZoomEye search module to prevent infinite loops and list truncation when encountering empty result pages. It introduces a three-attempt retry limit that skips to the next page if exceeded, caps results per page at 10 to minimize data loss, and refactors the module to support the ZoomEye v2 API.

Enhancements and features (1)

• #21892 from cdelafuente-r7 - This updates the AGENTS.md file with more granular rules outlining to how to write modules and their corresponding documentation files.

Bugs fixed (9)

• #21823 from DanielSwift1992 - Fixes typos in several GitHub workflows.
• #21880 from adfoster-r7 - Update the iOS image gather module to use store_loot for consistency with other modules.
• #21881 from adfoster-r7 - Ensure auth is available on the credentials endpoints.
• #21885 from adfoster-r7 - Adds additional validation to the marshal validator.
• #21905 from sjanusz-r7 - Fixes broken encoders, previously both x86/xor_poly and x86/avoid_underscore_tolower were returning errors when attempting encoding.
• #21916 from adfoster-r7 - Updates the db_import validation logic to be consistent across the different import data types.
• #21917 from sjanusz-r7 - Adds additional validation to the credential model updates.
• #21918 from adfoster-r7 - Adds additional validation to the RDP protocol support to handle unexpected sizes packets and responses.
• #21930 from adfoster-r7 - Replace recursive call to dn expand.

Documentation

You can find the latest Metasploit documentation on our docsite at docs.metasploit.com.

Get it

As always, you can update to the latest Metasploit Framework with msfupdate and you can get more details on the changes since the last blog post from GitHub:

• Pull Requests 6.5.4...6.5.5
• Full diff 6.5.4...6.5.5

If you are a git user, you can clone the Metasploit Framework repo (master branch) for the latest. To install fresh without using git, you can use the open-source-only Nightly Installers or the commercial edition Metasploit Pro