CVE-2026-93680 Langflow OSS is affected by multiple vulnerabilities
CriticalCVSS 9.8
EPSS 2.2%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm langflow oss | >= 1.0.0, <= 1.12.8 | No fix listed |
| langflow | >= 1.0.0, < 1.13.0 | 1.13.0 |
References
- www.ibm.com patch vendor-advisory