The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited. ​Tracked as…

IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-disk index, the attacker could also read the contents o

Langflow versions 1.0.0 to 1.12.8 had critical flaws enabling attackers to steal AI and developer credentials. Timely patching and inventory control are vital.

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.

IBMは、人気のローコードAIエージェントワークフローフレームワークであるLangflowと、そのリクエストルーティングおよびバックエンドサービスであるHonoのパッチをリリースしました。 IBMは、AIエージェントやLL

Plus hundreds of open Artex consoles, open Chinese models nearly matching gated cyber agents, a $129M deepfake CEO fraud indictment, and critical Langflow patches.

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.

Attackers began exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution flaw in the Langflow AI app builder, around Aug 29-30, 2026. Reported post-exploitation activity includes theft of secrets such as OpenAI API keys and AWS credentials, followed by attempted lateral movement.…

IBM patched critical vulnerabilities in Langflow, an open-source framework for building AI agents, LLM-powered workflows, and retrieval-augmented generation (RAG) systems. The flaws could allow attackers to bypass authentication, leak API credentials, and execute arbitrary code. Langflow, now owned by IBM, is popular in enterprise environments because it offers a visual experience that doesn’t require coding knowledge to create AI workflows and agents. Vulnerabilities in the framework have been exploited in the wild to steal AI and developer credentials before, most recently in August. This latest round of security patches fix four vulnerabilities, two of which are rated critical with 9.8 CVSS score. One flaw, tracked as CVE-2026-93680, stems from an incomplete remediation of a previous auto-login security issue. Exploiting it could allow attackers to bypass security restrictions and gain access to features that would normally require authentication. Another flaw, CVE-2026-110186, allows unauthenticated remote attackers to execute arbitrary code through Model Context Protocol (MCP) tool enumeration. A third vulnerability, CVE-2026-110193, which is rated as high severity, also allows for code and command execution on the server due to an issue in a third-party library used by the Agentic Assistant. However, exploiting this flaw requires authentication with at least a low-privileged account. The fourth vulnerability, CVE-2026-110192, is an information disclosure issue due to insufficiently protected API credentials. It is rated as 6.5 on the CVSS scale. The flaws affect Langflow OSS versions 1.0.0 to 1.12.8 and were fixed in the newly released 1.13.0 version, which is available both from the PyPI repository and as a Docker image. “Before upgrading, back up the database, secret key, and uploaded files,” IBM said in its advisory. “If the deployment uses automatic login, prepare the existing account for password sign-in as described in the installation and Docker upgrade instruction.” The company also released patches for three medium-severity flaws in Hono, an API and web application development framework used inside Langflow for request routing and backend web server tasks. The company advises users to upgrade Hono to version 4.13.5.

IBM's records cover Langflow OSS 1.0.0 to 1.12.8: an authentication bypass and code execution, both 9.8 with no login needed. Version 1.12.8, released hours before the fix, is still affected.

IBM meldet für Langflow zwei Lücken mit CVSS 9.8, ausnutzbar ohne Konto. Betroffen sind 1.0.0 bis 1.12.8, nur 1.13.0 schützt. Was Betreiber tun sollten.

IBM has released patches for the popular low-code AI agent workflow framework and its request routing and backend service Hono.

Langflow 1.13.0 fixes two critical flaws that could let unauthenticated attackers bypass authentication or remotely execute code.