thehackernews.com
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
IBM disclosed four critical vulnerabilities affecting every Langflow release from version 1.0.0 through 1.12.8, allowing unauthenticated attackers to bypass authentication or execute arbitrary code on servers. One flaw exploits the Model Context Protocol (MCP) to enumerate tools without credentials, while another stems from the default‑enabled LANGFLOW_AUTO_LOGIN setting, which logs users in as superusers without prompting. The vulnerabilities are catalogued as CVE‑2026‑93680 and related IDs, with a Metasploit module already demonstrating the authentication bypass. IBM’s advisory, first issued on [...]