Metasploit Wrap Up: Langflow, MongoDB, and More

T1Covered by 1 source · first reported by Rapid7 at 23 Oct, 15:38 UTC

This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an authentication bypass (CVE-2026-93680), 3 unauthenticated remote code execution paths (CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134)…

aidevreleasessecurity

Sources

• T1Metasploit Wrap Up: Langflow, MongoDB, and MoreRapid723 Oct, 15:38

Vulnerabilities

• CVE-2026-0768
• CVE-2026-0769
• CVE-2026-10134
• CVE-2026-93680