Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
Metasploit 6.5.5 adds modules for in-the-wild GitLab file read, IPv6 DNS takeover, and Langflow RCE.
Rapid7's Metasploit wrap-up for Framework 6.5.5 highlights an unauthenticated GitLab arbitrary file read, CVE-2026-85706, which the team says is exploited in the wild. It affects GitLab CE and EE from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. New auxiliary modules implement mitm6-style DHCPv6 and IPv6 router-advertisement DNS takeover (CVE-2026-20929) for Kerberos relay against Windows. An exploit module targets authenticated RCE in Langflow 1.11.1 and earlier via custom components (CVE-2026-18729), plus a Kate plugin persistence module.
- GitLab CVE-2026-85706 is an unauthenticated arbitrary file read exploited in the wild.
- Affected GitLab CE/EE ranges: 18.7 before 19.1.8, 19.2 before 19.2.6, 19.3 before 19.3.2.
- New modules coerce Windows DNS via rogue DHCPv6 and IPv6 router advertisements (CVE-2026-20929).
- Authenticated Langflow RCE module targets CVE-2026-18729 in versions 1.11.1 and below.
- Release 6.5.5 also adds Kate persistence and fixes encoders and import validation.
- Organizations
- Rapid7
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-18729 | Authenticated RCE via Code Injection in IBM Langflow OSS 1.0.0–1.11.1 | 8.8 | <1% | ||
| CVE-2026-20929 | Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network | 7.5 | 1% | ||
| CVE-2026-85706 | Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE | 10.0 | 97% | KEVPoC ×13 | KEV |
From the original article
4 min read at rapid7.com
This wrap-up comes from the beautiful country of Belgium, where the Metasploit team is team-building and team-eating while we cheer on our very own teammates giving talks - shout-out to @jburgess-r7 who gave a wonderful talk about some of his 0day research.
By The Metasploit Team · rapid7.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.