Scan my site freeScan free

Fix guides / Security notices

Security notice

Run your own Langflow server? Two flaws rated 9.8 need no account. Upgrade to 1.13.0.

Last updated: Thursday, November 5, 2026, 5:18 PM ETStatus: Fix released. No attacks reported. Upgrade now.

Langflow is an open-source tool for building AI agents and workflows. On October 28, 2026, IBM, which issues the security bulletins for Langflow, listed two flaws in it that it rates 9.8 out of 10, the critical level, and that need no account: CVE-2026-93680, which IBM describes as a bypass of authentication, and CVE-2026-110186, which IBM describes as a way to run arbitrary code on the server. They affect Langflow 1.0.0 through 1.12.8, including 1.12.8, which came out on October 22. Version 1.13.0, released the same day, is the fix, and IBM lists no workaround. CISA does not list either flaw as exploited and we found no report of attacks. A public scanning module that cites CVE-2026-93680 exists, and CISA's list already holds six earlier Langflow flaws that were exploited. This is not a website or store flaw. It matters if you or an IT provider run your own Langflow server, especially one that can be reached from the internet, because whoever controls that server controls what its flows can reach. Back it up, then upgrade to 1.13.0 today.

What happened

Who should worry

This is not a flaw in websites or online stores. It is in a tool that teams run on their own servers to build AI agents and workflows. It matters for your business if an agency, developer or IT person runs Langflow, especially if the server can be reached from the internet, because it usually holds the keys and passwords its flows use to reach AI services, databases and other tools. IBM's bulletin lists exposure of API credentials among the issues. If you are not sure, ask. Ask about this if any of these are true:

If a provider hosts Langflow for you, ask whether it runs 1.13.0 or later. We found no IBM statement about hosted services. We also found no statement about Langflow Desktop. The bulletin covers "Langflow OSS" on Windows, Linux and Mac OS. If nobody you work with uses Langflow, this notice does not apply to you.

What to do now

These steps are for whoever runs the Langflow server. If that is not you, send them the message below.

  1. Find out if you run it, and which version. For a pip install, pip show langflow prints the version. If it is 1.12.8 or older, it is affected.
  2. Back up first. IBM says to back up the database, the secret key and the uploaded files before upgrading. (IBM bulletin)
  3. If it signs in automatically, prepare for password sign-in. Langflow 1.13 turns automatic login off by default. IBM and Langflow say to prepare the existing account for password sign-in before you upgrade. If you upgrade without doing so you may be unable to sign in. If that happens, follow Langflow's recovery steps, and do not delete or reinstall Langflow to get back in, because Langflow warns that can permanently remove your flows. (IBM bulletin, Langflow installation guide, Langflow Docker upgrade guide)
  4. Upgrade to 1.13.0. IBM gives pip install --upgrade "langflow==1.13.0" for the Python package. For Docker, use the image langflowai/langflow:1.13.0 and keep the deployment's persistent data. Then check that the version is 1.13.0 and that you can sign in. (IBM bulletin)
  5. If you cannot upgrade today, IBM offers no workaround. As a general precaution, not IBM's advice, ask your admin whether the server can be taken off the internet or limited to the people and networks that need it until you upgrade.
  6. Check for a break-in. No signs of attack have been published, so there is nothing specific to look for. As a general check, especially if the server was on 1.12.8 or older and reachable from the internet, ask your admin to review who has accounts, which flows were added or changed recently, and what keys and passwords are stored in Langflow. If there is any sign of a problem, or you cannot rule it out, replace those keys and passwords.

What to send your IT provider or host

Langflow 1.0.0 through 1.12.8 has two critical flaws that need no account, CVE-2026-93680 (an authentication bypass) and CVE-2026-110186 (arbitrary code execution), both rated 9.8 by IBM, which published its bulletin on October 28, 2026. IBM lists no workaround and says to upgrade to 1.13.0. CISA does not list them as exploited. Please tell us whether we run any Langflow server, which version it is, and whether it can be reached from the internet. If it is 1.12.8 or older, please back up the database, secret key and uploaded files, prepare any automatic-login account for password sign-in, and upgrade to 1.13.0 today. Please then check for unexpected accounts or flows, replace any keys or passwords you cannot be sure are safe, and tell us what you find. Sources: IBM's bulletin, the CVE records, Langflow's installation guide.

Common questions

Is my website affected?

Not directly. The flaws are in Langflow, a tool for building AI agents and workflows, not in website or store software. They matter if your business runs its own Langflow server, because whoever controls that server controls what its flows can reach.

Can EverThread tell me if I am affected?

No. EverThread does not test for this. We check your website from the outside, the way a browser sees it. We cannot see whether you run Langflow, which version it is on or whether it can be reached from the internet. Whoever manages the server can check. Our free scan does look at your home page for other common problems, such as an expired padlock certificate, missing browser safety settings and files that should not be public.

Is it being exploited?

We found no report that it is. CISA does not list either flaw as exploited, and its own assessment says exploitation is "none." A public scanning module for CVE-2026-93680 exists, and CISA lists six earlier Langflow flaws as exploited, so do not wait. (CISA KEV, CVE-2026-93680 record, CVE-2026-110186 record, The Hacker News)

I am on 1.12.8, the latest 1.12 release. Am I safe?

No. IBM lists 1.12.8 as affected. You need 1.13.0. (IBM bulletin)

Does turning off automatic login protect me?

We do not know. IBM's bulletin does not say whether a server with automatic login off is safe, and it lists no workaround. Upgrade to 1.13.0. (IBM bulletin)

Where can I follow official updates?

The IBM bulletin and the Langflow 1.13.0 release page. All current notices are on our notices page.

Security alerts by email

Hear about the next one first.

When a flaw puts websites at risk, we send one plain-English email: what happened, who it affects and what to do. It's free, whether or not you use EverThread.

We email you a link to confirm first, and every alert has a one-click unsubscribe. Alerts can include a short note about EverThread. Already a customer? Use your account email and your alerts include a link to your dashboard. Privacy

Sources

While you are here

Check your site's other basics free. We look at your home page the way a browser does and tell you in plain English. This scan cannot see whether you run Langflow, which version it is on or whether it can be reached from the internet. No account.

Or sign up free and we check it every day and email you when something changes.