CVE-2026-93680
CVE-2026-93680: Langflow AI Authentication Bypass Langflow versions 1.5.0 through 1.11.4 allow unauthenticated connections to the MCP SSE endpoint, allowing attackers to…
EXPLOIT
Langflow AI Authentication Bypass
Langflow versions 1.5.0 through 1.11.4 allow unauthenticated connections to the MCP SSE endpoint, allowing attackers to initialize MCP sessions and retrieve privileged MCP-related information. The MCP information collected from this module is stored in Metasploit loot as a JSON document.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No writeups or analysis indexed.
No timeline events available.