Breaking

Two Critical Langflow Flaws Allow Remote Code Execution and Authentication Bypass Without an Account

November 2, 2026 at 07:48 EST

Security
AI Agents

Two critical vulnerabilities in Langflow, an open-source platform for building AI workflows, could allow attackers to execute remote code and bypass authentication without holding an account, according to a security alert from The Hacker News.

Critical flaws · Langflow

Two critical Langflow flaws allow unauthenticated attackers to bypass login and potentially run code

Every release from 1.0.0 through 1.12.8 is affected. Exposed instances can be targeted without an account, and a public Metasploit module has lowered the barrier to probing them.

Critical-severity vulnerabilities

Accounts needed to exploit either flaw

1.12.8

Highest affected version reported

Affected release lines, 1.0 to 1.12

Each block is one minor release line. Every line from 1.0.0 through 1.12.8 falls in the affected range.

1.0

1.1

1.2

1.3

1.4

1.5

1.6

1.7

1.8

1.9

1.10

1.11

1.12

13 of 13 minor release lines in the range are affected, up to and including 1.12.8.

From exposed instance to system control

The reported risk path. The report does not describe the technical root cause of either flaw.

Step 1

Reach an exposed instance

→

Step 2

Bypass authentication

→

Step 3

Execute remote code

→

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.