IBM patches critical Langflow flaws enabling authentication bypass and RCE
The patches fix four vulnerabilities in Langflow versions 1.0.0 to 1.12.8, including two critical ones rated 9.8 CVSS, and affect Hono framework upgrades.
Stories per day · 30 days
3 RSS
Relatedrce4authentication-bypass3cve-2026-1057402honeypot2ibm2ai-agent1ai-framework1ai-platform1burger-king1chrome1cisa1command-injection1cyble1diffusion-language-models1grafana1ics1ics-sniper1langdit1
28 stories, newest first · one card per story
Stories tagged #langflow
IBM Discloses Critical Langflow Vulnerabilities for Remote Code Execution
Seven vulnerabilities in Langflow versions 1.0.0-1.12.8 fixed in 1.13.0, including unauthenticated RCE with CVSS 9.8.
Critical Langflow Flaws Allow Unauthenticated Code Execution
Four flaws in Langflow 1.0.0-1.12.8 enable unauthenticated RCE and auth bypass; upgrade to 1.13.0 fixes them.
Metasploit adds Langflow, OpenCTI, Grafana and MongoDB modules
Six Langflow modules cover an auth bypass and remote code execution from 1.0.0 through 1.11.4.
6
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Roundup covers ICS-Sniper, an XWorm panel RCE, an 11-million-record Burger King Japan breach, and a $250,000 Chrome chain.
8
Designing Transformers for Continuous Diffusion Language Models
LangDiT redesigns Transformers for continuous diffusion LMs, cutting OpenWebText generation perplexity to 11.33–21.72.
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Honeypots recorded 1,423 attempts exploiting Langflow's critical authenticated RCE, CVE-2026-105740.
11
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Rapid7's Metasploit wrap-up adds 12 modules, including unauthenticated RCE for N-central, Langflow, LiteLLM, and dizqueTV.
12
Update modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0769.rb
Metasploit updated its Langflow unauthenticated RCE module for CVE-2026-0769.
IBM security advisory (AV26-1022)
Canada's Cyber Centre says IBM DataPower Gateway and Langflow OSS need patches, including XSS CVE-2026-14990.
Update modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb
Metasploit updated its authenticated RCE module for Langflow flaw CVE-2026-7873.
The AI app builder your team trusts has a root-level backdoor
Attackers actively exploit unauthenticated RCE CVE-2026-0768 (CVSS 9.8) in internet-facing Langflow instances to run code as root and steal credentials.
8
IBM Patches Multiple Langflow OSS Flaws Including Two Critical RCE Vulnerabilities
IBM patched 25 Langflow OSS flaws, including two unauthenticated critical remote code execution bugs, in version 1.12.3.
The vulnerabilities AI finds are the ones attackers want
GTIG says AI-found flaws skew toward remote code execution, and attackers hit BeyondTrust CVE-2026-1731 within four days.
6
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
Metasploit 6.5.5 adds modules for in-the-wild GitLab file read, IPv6 DNS takeover, and Langflow RCE.
6
When Ransomware Targets AI Models: Defending the AI/ML Recovery Chain
Sysdig's JADEPUFFER ransomware campaign deployed the ENCFORGE Go binary via Langflow CVE-2025-3248 to encrypt AI models, datasets, and vector stores for destruction-based extortion.
4
AI Agents Now Run Ransomware Attacks End-to-End Without Human Operators
SOCRadar documented JADEPUFFER, an AI agent that autonomously executed a ransomware campaign from Langflow exploit through encryption and extortion.
3
JADEPUFFER Evolves Agentic Ransomware to Target AI Models and Training Data
Sysdig links JADEPUFFER, an AI-driven ransomware actor, to ENCFORGE, a new locker encrypting and destroying AI models, training data, and vector databases.
4
IBM security advisory (AV26-922)
Canadian Cyber Centre relays IBM advisory for Langflow, MQ, and Sterling File Gateway flaws including MQ remote code execution (CVE-2026-13293).
E-Commerce Access, Vedicline Data, Langflow RCE, ASUS Claim, and Energy Shell Access
SOCRadar reports underground posts claiming a Bangladeshi e-commerce database, Vedicline data leak, Langflow RCE, ASUS breach, and energy-sector shell access.
Langflow Remote Code Execution Vulnerability Exploited in Attacks (CVE-2026-0768)
Critical CVSS 9.8 RCE CVE-2026-0768 in Langflow is under active exploitation, with attackers probing for credentials and secrets.
3
Hackers Target Langflow in CVE-2026
Threat actors are actively exploiting CVE-2026-0768, an unauthenticated Python RCE in Langflow, hunting OpenAI, AWS, and SSH credentials.
3
[webapps] Langflow 1.10.0 - RCE
A public proof-of-concept demonstrates remote code execution in Langflow 1.10.0, the open-source AI workflow builder.