{"type":"bundle","id":"bundle--88c3501e-c2d3-5276-8ba3-f5f7adbede47","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--762aa775-fbe9-542a-882b-732743278047","created":"2026-10-29T15:59:41.178Z","modified":"2026-10-29T15:59:41.178Z","name":"Langflow OSS 33-CVE disclosure: no-login auth bypass and code execution through 1.12.8 (CVE-2026-93680, CVE-2026-110186), fixed in 1.13.0","description":"On 2026-10-29 between 15:14 and 15:19 UTC, IBM (the CNA for Langflow) published 33 CVE records for Langflow OSS, backed by three IBM security bulletins dated 2026-10-19 (nodes 7293015 and 7293016) and 2026-10-28 (node 7294467). Four IDs affect every release from 1.0.0 through 1.12.8 and are fixed only in 1.13.0 (released 2026-10-22): CVE-2026-93680 (9.8, improper authentication, no login), CVE-2026-110186 (9.8, code execution via improper control of code generation, no login), CVE-2026-110193 (8.8, a low-privileged user makes the Agentic Assistant generate or submit component code that runs OS commands) and CVE-2026-110192 (6.5, insufficiently protected credentials). Sixteen IDs through 1.12.3 are fixed in 1.12.4, including the unauthenticated CVE-2026-104339 (9.8) and message-broker deserialization CVE-2026-104317 (8.1). Thirteen through 1.12.4 are fixed in 1.12.5, including three authenticated 9.9 code-execution bugs (CVE-2026-107327, 107328, 107329). Release builds of 1.12.x default LANGFLOW_AUTO_LOGIN to true, which signs visitors in as the bootstrap superuser, so account-required bugs are reachable by anyone who can open the UI on a default install. Langflow 1.13.0 turns auto-login off by default and requires a superuser password. A Metasploit auxiliary module for CVE-2026-93680 (released 2026-10-23) opens the MCP SSE endpoint at /api/v1/mcp/sse without credentials; the module lists 1.5.0 through 1.11.4.","aliases":["CVE-2026-93680","CVE-2026-110186","CVE-2026-104339","CVE-2026-107327","CVE-2026-107328","CVE-2026-107329","CVE-2026-110193","Langflow 1.13.0","Langflow OSS is affected by multiple vulnerabilities","Langflow auth bypass","Langflow unauthenticated RCE","Langflow MCP SSE auth bypass","IBM Langflow security bulletin"],"first_seen":"2026-10-22T21:20:16Z","last_seen":"2026-10-29T15:48:15Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"IBM Security Bulletin 7294467: Langflow OSS 1.0.0-1.12.8, fixed in 1.13.0","url":"https://www.ibm.com/support/pages/node/7294467"},{"source_name":"IBM Security Bulletin 7293016: Langflow OSS 1.0.0-1.12.4, fixed in 1.12.5","url":"https://www.ibm.com/support/pages/node/7293016"},{"source_name":"IBM Security Bulletin 7293015: Langflow OSS 1.0.0-1.12.3, fixed in 1.12.4","url":"https://www.ibm.com/support/pages/node/7293015"},{"source_name":"CVE-2026-93680 CVE record","url":"https://www.cve.org/CVERecord?id=CVE-2026-93680"},{"source_name":"CVE-2026-110186 CVE record","url":"https://www.cve.org/CVERecord?id=CVE-2026-110186"},{"source_name":"langflow-ai/langflow v1.13.0 release notes","url":"https://github.com/langflow-ai/langflow/releases/tag/v1.13.0"},{"source_name":"langflow-ai/langflow PR 14993: disable automatic login by default","url":"https://github.com/langflow-ai/langflow/pull/14993"},{"source_name":"langflow-ai/langflow PR 15789: guide recovery after upgrading from an auto-login installation","url":"https://github.com/langflow-ai/langflow/pull/15789"},{"source_name":"langflow 1.13.0 on PyPI","url":"https://pypi.org/project/langflow/1.13.0/"},{"source_name":"Rapid7: Metasploit Wrap Up: Langflow, MongoDB, and More","url":"https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-langflow-mongodb-and-more/"},{"source_name":"Metasploit module langflow_auth_bypass_cve_2026_93680","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/langflow_auth_bypass_cve_2026_93680.rb"},{"source_name":"CISA Known Exploited Vulnerabilities catalog","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"source_name":"HOL: Langflow CVE-2026-93680 and 32 more bugs, upgrade to 1.13.0","url":"https://hol.org/blog/cve-2026-93680-langflow-auth-bypass-rce-upgrade-1-13-0"}]}]}