IBM Langflow OSS: Authentication bypass due to improper authentication

Summary

IBM Langflow OSS 1.0.0 through 1.12.8, an open-source tool for building AI agents and workflows, contains an improper authentication flaw (CWE-287). According to IBM, a remote attacker without credentials can bypass security restrictions. IBM groups this issue with other Langflow vulnerabilities, including remote code execution, and a public Metasploit module is reported.

Affected

• IBM Langflow OSS 1.0.0 through 1.12.8

Fixed in

• Upgrade to Langflow OSS 1.13.0 or later, as recommended by IBM and the CVE Numbering Authority.
• Upgrade via pip with 'pip install langflow --upgrade' or pull the latest tagged Docker image.

Workaround

• No vendor workaround documented. IBM recommends upgrading.
• Until the upgrade is done, restrict network access to the Langflow port to trusted hosts or place the service behind an authenticating reverse proxy or VPN.

Exploitation

• Rapid7 reports a new Metasploit auxiliary module for this CVE. VulDB states that no exploit is available, so sources conflict.
• CISA SSVC assessment: exploitation none, automatable yes.
• No confirmed exploitation in the wild found. Strix lists the CVE as not in KEV.

Our recommendation

• Upgrade all Langflow OSS installations to 1.13.0 or later without delay.
• Check whether the instance is reachable from the internet and remove public exposure where possible.
• If the instance was exposed, rotate stored API keys and AI-provider credentials and review logs for unexpected access.
• Check for other known Langflow vulnerabilities at the same time, since the IBM batch covers several issues.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

Links to third-party sites, not checked by us – exploit code can contain malware. Only use it in isolated test environments.

• Proof of concept on GitHub (1 repositories) iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).
  rmhowe425/POC-CVE-2026-93680
• Metasploit module auxiliary/gather/langflow_auth_bypass_cve_2026_93680 – Langflow AI Authentication Bypass

Research sources

• IBM Security Bulletin www.ibm.com
• Rapid7 Metasploit wrap-up www.rapid7.com
• Langflow releases github.com
• HOL blog (secondary) hol.org
• VulDB entry vuldb.com
• OffSeq threat entry radar.offseq.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 15:48.