CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-93680 — IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass se...

·Source: NIST NVD

Updated:

Executive Summary

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.

Analysis

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication. CVSS Score: 9.8. Published: 2026-10-29T16:20:06.040.

Indicators of Compromise (1)

CVE (1)
CVE-2026-93680
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 29, 2026. Verified by: NIST.

Related Threats

LOWAi

Metasploit Wrap Up: Langflow, MongoDB, and More

This release adds multiple new modules, and 6 of those modules point at a single target: Langflow , the open-source LLM workflow builder. Together they cover an authentication bypass (CVE-2026-93680), 3 unauthenticated remote code execution paths (CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134), and 2 authenticated code execution flaws (CVE-2026-7873 and CVE-2026-93674), spanning Langflow releas

CVE-2026-93680CVE-2026-0768
Rapid7
MEDIUMVulnerabilityNEW

DHS Strikes Back, Targeting 'Icepick' Leaks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/trump-administration-strikes-back-targeting-icepick-leaks-image_small-5-a-33249.jpg" align=right hspace=4><b>Icepi.cx Is Down But Icepicx.is Is Live</b><br>

Bank Info Security
MEDIUMVulnerabilityNEW

CISO Problems That Can't Be Solved With Technology

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ciso-problems-that-cant-be-solved-technology-image_small-4-a-33248.jpg" align=right hspace=4><b>Operational Struggles and Arrogant Vendors Mean Tool Churn Is Likely to Continue</b><br>No matter how advanced or powerful cybersecurity tools become, they will never be able to fix many of the key problems that confront cyber defenders

Bank Info Security