Tag
#Langflow
Langflow Auto-Login Superuser Bypass, RCE via MCP (CVE-2026-93680)
Langflow OSS 1.0.0 to 1.12.8 hands any caller a superuser session that reaches RCE through its MCP tools; fixed in 1.13.0.
Oct 30, 2026
Can an AI Agent Prove SAST Findings at Runtime?
Static analysis flags possible bugs but cannot prove them. Runtime validation proved a Langflow a...
Sep 23, 2026