CRITICAL LANGFLOW FLAWS COULD LET UNAUTHENTICATED ATTACKERS RUN CODE ON SERVERS

Summary from the TLDR InfoSec newsletter

IBM reported four Langflow vulnerabilities affecting versions 1.0.0 through 1.12.8. Two are critical and require no account: CVE-2026-93680 bypasses authentication, while CVE-2026-110186 permits arbitrary code execution through MCP tool enumeration. A public Metasploit module already enumerates Langflow MCP tools without credentials. Version 1.13.0 is the only fix. It disables automatic login by default. IBM has not published a workaround.