{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Langflow OSS: unauthenticated RCE and auth bypass (CVE-2026-110186, CVE-2026-93680), fixed in 1.13.0 · updates",
  "home_page_url": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026",
  "feed_url": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026/feed.json",
  "description": "IBM published a security bulletin on Oct 28 2026 for Langflow OSS 1.0.0 through 1.12.8, the open source AI workflow builder. It covers an unauthenticated remote code execution flaw (CVE-2026-110186, CVSS 9.8) that IBM says is exploitable through model context protocol tool enumeration, an incomplete fix of the auto-login security control that allows an authentication bypass (CVE-2026-93680, CVSS 9.8), several authenticated code execution bugs (CVSS 8.8), API key exposure, path traversal, and vulnerable bundled dependencies such as Hono. The fix is to upgrade to Langflow OSS 1.13.0 or later; IBM lists no workarounds. Companion IBM bulletins for Langflow OSS add CVE-2026-104339 (CVSS 9.8, unauthenticated OS command injection leading to code execution) and CVE-2026-107328 (CVSS 9.9, authenticated code injection through eval/exec), with the same upgrade-to-1.13.0 fix. A further IBM bulletin adds CVE-2026-107327 (CVSS 9.9, authenticated code execution due to missing authorization, Langflow OSS 1.0.0 through 1.12.4), and another adds CVE-2026-107329 (CVSS 9.9, authenticated code execution through improper control of code generation, same versions).",
  "language": "en",
  "_pwn": {
    "slug": "langflow-oss-multiple-rce-cve-2026-110186-oct-2026",
    "severity": "critical",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026#2026-10-29-52f0335a",
      "url": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026#2026-10-29-52f0335a",
      "title": "Langflow OSS: unauthenticated RCE and auth bypass (CVE-2026-110186, CVE-2026-93680), fixed in 1.13.0: IBM's CNA publishes the CVE records, including CVE-2026-110186 (CVSS 9.8, code injection, no authentication required).",
      "content_text": "Langflow OSS: unauthenticated RCE and auth bypass (CVE-2026-110186, CVE-2026-93680), fixed in 1.13.0: IBM's CNA publishes the CVE records, including CVE-2026-110186 (CVSS 9.8, code injection, no authentication required).\n\nSource: https://www.cve.org/CVERecord?id=CVE-2026-110186",
      "date_published": "2026-10-29T00:00:00.000Z",
      "external_url": "https://www.cve.org/CVERecord?id=CVE-2026-110186",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026#2026-10-28-a92fc237",
      "url": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026#2026-10-28-a92fc237",
      "title": "Langflow OSS: unauthenticated RCE and auth bypass (CVE-2026-110186, CVE-2026-93680), fixed in 1.13.0: IBM publishes a security bulletin listing unauthenticated RCE, an auto-login authentication bypass, authenticated code execution, credential exposure and dependency flaws in Langflow OSS 1.0.0 through 1.12.8, and says to upgrade to 1.13.0 or later.",
      "content_text": "Langflow OSS: unauthenticated RCE and auth bypass (CVE-2026-110186, CVE-2026-93680), fixed in 1.13.0: IBM publishes a security bulletin listing unauthenticated RCE, an auto-login authentication bypass, authenticated code execution, credential exposure and dependency flaws in Langflow OSS 1.0.0 through 1.12.8, and says to upgrade to 1.13.0 or later.\n\nSource: https://www.ibm.com/support/pages/node/7294467",
      "date_published": "2026-10-28T00:00:00.000Z",
      "external_url": "https://www.ibm.com/support/pages/node/7294467",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026#2026-10-22-b953afba",
      "url": "https://pwn.watch/i/langflow-oss-multiple-rce-cve-2026-110186-oct-2026#2026-10-22-b953afba",
      "title": "Langflow OSS: unauthenticated RCE and auth bypass (CVE-2026-110186, CVE-2026-93680), fixed in 1.13.0: Langflow releases v1.13.0, the version IBM later names as the fix.",
      "content_text": "Langflow OSS: unauthenticated RCE and auth bypass (CVE-2026-110186, CVE-2026-93680), fixed in 1.13.0: Langflow releases v1.13.0, the version IBM later names as the fix.\n\nSource: https://github.com/langflow-ai/langflow/releases/tag/v1.13.0",
      "date_published": "2026-10-22T00:00:00.000Z",
      "external_url": "https://github.com/langflow-ai/langflow/releases/tag/v1.13.0",
      "tags": [
        "critical"
      ]
    }
  ]
}