Critical Langflow Flaws Allow Unauthenticated Code Execution
Original title: Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Four flaws in Langflow 1.0.0-1.12.8 enable unauthenticated RCE and auth bypass; upgrade to 1.13.0 fixes them.
Four critical vulnerabilities in Langflow versions 1.0.0 through 1.12.8 could let unauthenticated attackers bypass authentication or run arbitrary code on servers. IBM disclosed the issues on October 28 with the only fix in version 1.13.0 released October 22. A public Metasploit module demonstrates exploitation for one flaw, CVE-2026-93680.
Unconfirmed: Whether servers with automatic login disabled remain vulnerable to the second flaw
- CVE-2026-93680 allows unauthenticated access
- CVE-2026-110186 enables arbitrary code execution
- CVE-2026-110193 allows code generation under low-privilege accounts
- CVE-2026-110192 leaks sensitive credential info
- Auto-login enabled by default in 1.12.8
Impact: unauthenticated remote code execution
- 1.Upgrade to Langflow 1.13.0
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-93680+3 related CVEs | Authentication bypass in IBM Langflow OSS 1.0.0–1.12.8 | 9.8 group max | 2% | PoC |
From the original article
3 min read at thehackernews.com
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.