Security · 3 November 2026
Langflow versions 1.0.0‑1.12.8 vulnerable; fix only in 1.13.0
Two critical Langflow flaws let unauthenticated attackers bypass authentication or execute code; all releases 1.0.0‑1.12.8 are affected and only version 1.13.0 provides a fix, with a Metasploit module demonstrating CVE‑2026‑93680 authentication bypass.
Why it matters
Plan to upgrade any Langflow deployments to 1.13.0; users will expect secure AI workflow tooling.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 3 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.