Advisory · CVE-2026-93680
Unauthenticated security bypass in Langflow via improper authentication
IBM Langflow OSS 1.0.0 through 1.12.8 lets a remote attacker bypass security restrictions due to improper authentication, with no authentication required. IBM rates it critical at CVSS 9.8.
- Vendor
- IBM
- Product
- Langflow OSS
- Identifier / CWE
- CVE-2026-93680
CWE-287 - Action timing
- Immediate
Explain it like I’m five
Langflow is supposed to check identity at the door, but this flaw lets a stranger walk past the check entirely and reach things meant for logged-in users.
- 01Unauthenticated request
A remote attacker sends a crafted request to Langflow with no login.
- 02Authentication check bypassed
Improper authentication lets the request past restrictions meant for authenticated users.
- 03Restricted access gained
The attacker reaches functionality and data that should require authentication.
What happened
IBM disclosed CVE-2026-93680 in Langflow OSS versions 1.0.0 through 1.12.8: a remote attacker can bypass security restrictions due to improper authentication. IBM rates it critical at CVSS 3.1 9.8, with no privileges required, no user interaction, and unchanged scope.
Paired with the unauthenticated code-execution flaw in the same bulletin, this bypass widens what an unauthenticated attacker can reach on an affected instance.
What to do
- Inventory Langflow deployments, including self-hosted, demo, and individually managed instances.
- Upgrade Langflow OSS to version 1.13.0 or later following the IBM bulletin.
- Take internet-facing instances offline or behind strict access control until patched.
- Review application and host logs for unauthenticated access to restricted functionality.
- Rotate credentials and tokens that were reachable from affected servers if compromise cannot be excluded.
Management note
Patch with the unauthenticated RCE in the same bulletin. An authentication bypass at 9.8 standing alone would already justify emergency handling.