CVE Tools
Track your stack

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

The Hacker NewsBy The Hacker News

Our summary

IBM has disclosed four security flaws in the open-source AI workflow builder Langflow, two of which are rated critical and can be triggered by attackers with no account at all. CVE-2026-93680 (CVSS 9.8) lets an unauthenticated user bypass authentication, while CVE-2026-110186 (CVSS 9.8) enables arbitrary code execution through flawed handling of generated code, reportedly reachable via Model Context Protocol tool enumeration. Two further bugs, CVE-2026-110193 and CVE-2026-110192, require a low-privileged login but can still lead to command execution or credential exposure. The flaws affect every release from 1.0.0 through 1.12.8; a Metasploit module already targets the auth-bypass issue, and admins are urged to upgrade to Langflow 1.13.0, which also disables automatic superuser login by default.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and MoreCVE-2026-110186, CVE-2026-93680
  2. The Hacker NewsLangflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit AttemptsCVE-2026-9198
  3. BleepingComputerCritical Langflow flaw exploited to steal OpenAI and AWS keysCVE-2026-9198
  4. BleepingComputerCISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flawsCVE-2026-9198
  5. SecurityWeekCISA Warns of Exploited Langflow, N-central, and Tomcat VulnerabilitiesCVE-2026-9198
  6. The Hacker NewsCISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively ExploitedCVE-2026-9198

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure