CVE-2026-93680

Summary

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain an authentication bypass vulnerability (CWE-287), allowing unauthenticated remote attackers to circumvent security restrictions and gain unauthorized access to protected resources.

Exploitability

Exploitation is highly likely due to the CVSS vector indicating network accessibility, low attack complexity, and no user interaction or privileges required.

Blast radius

Successful exploitation could lead to full system compromise including confidentiality, integrity, and availability impacts across all services exposed by the Langflow application.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Langflow OSS version 1.12.9 or later, which contains the official fix for CVE-2026-93680.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.