Live › vulnerability › CVE-2026-93680
IBM Langflow OSS versions 1.0.0 through 1.12.8 fail to properly check authentication, so a remote attacker can bypass security restrictions. The sources do not say what the attacker can reach after the bypass.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Teams running self-hosted IBM Langflow OSS from 1.0.0 through 1.12.8 that are reachable over a network. The sources do not say whether default configuration is affected or whether login is needed to trigger the flaw.
No product ranges from the sources yet.
pip show langflow, and compare it to the affected range 1.0.0 through 1.12.8.1.12.8 is implied by the affected range, but the sources do not name it.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
This page as .md · .json · in your agent: get_signal("CVE-2026-93680")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.