Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers — Rassegna informativa e sintesi tecnica curata da PCNext sulla base del report documentato da The Hacker News.

Sintesi della Notizia & Quadro dell’Evento

Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week .

Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version 1.13.0.

Dettagli Tecnici & Approfondimento

Neither flaw is in CISA's Known Exploited Vulnerabilities catalog, as of the catalog's October 30 update. Six other Langflow flaws are listed there, most recently CVE-2026-9198, which was added in August .

The four Langflow flaws in IBM's bulletin, first published on October 28 and updated the next day, are:

One of the flaws is "unauthenticated remote code execution exploitable through model context protocol tool enumeration," according to IBM. Through the Model Context Protocol (MCP), Langflow can offer its flows as tools to AI apps that support MCP.