IBM Langflow OSS multi-vulnerability bulletin for 1.13.0

Evidence record

IBM bulletin on Langflow MCP tool listing code execution, insecure auto-login defaults, and generated Python component restrictions.

Read the original source ↗

Claim-level citations (3)

• supportsLangflow Agentic Assistant generated component code bypassed a Python restriction list: IBM identifies CVE-2026-110193 as a low-privilege-generated-component command-execution path fixed in Langflow 1.13.0.

  IBM bulletin, CVE-2026-110193 Agentic Assistant generated-component restrictions

• supportsLangflow 1.13.0 changed auto-login defaults without overriding explicit insecure settings: IBM reports that Langflow 1.13.0 disabled auto-login by default to address CVE-2026-93680, while an explicit auto-login environment override can remain active.

  IBM bulletin, CVE-2026-93680 default-authentication behavior and 1.13.0 correction

• supportsLangflow MCP tool enumeration exposed a remote code-execution path: IBM reports CVE-2026-110186 as a critical Langflow MCP tool-enumeration code-execution vulnerability fixed by Langflow 1.13.0.

  IBM bulletin, CVE-2026-110186 description and fixed release