TechAILatest.newsTrackers

Langflow news

Open-source AI agent and workflow builder1 story

Langflow is an open-source, Python-based visual builder for AI agents, LLM workflows and retrieval-augmented generation pipelines, released under the MIT licence.

Every story about Langflow

Tech AI Latest

Langflow patches two critical 9.8 flaws that let attackers run code without logging in

Cybersecurity

IBM's bulletin for Langflow OSS lists two 9.8 flaws, an auth bypass and code execution via MCP tool enumeration, in versions 1.0.0 to 1.12.8. The fix is 1.13.0.

Summary

IBM has published a security bulletin for Langflow OSS, the open-source builder for AI agents and LLM workflows, covering two critical flaws rated 9.8. CVE-2026-93680 bypasses authentication through an incompletely fixed auto-login issue, and CVE-2026-110186 allows code execution through Model Context Protocol tool enumeration. Versions 1.0.0 to 1.12.8 are affected. IBM's fix is Langflow 1.13.0 and it lists no workaround.