exploit/multi/http/langflow_auth_command_injection_cve_2026_93674

weaponized

Langflow AI Auth Blind Command Injection

view exploit source metasploittype exploitpublished 2026-09-22catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-93674US	critical9.8	15.3% (97th)	Exploit	2026-10-07
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.