Description
Langflow versions 1.5.0 through 1.11.4 allow unauthenticated connections to the MCP SSE endpoint, allowing attackers to initialize MCP sessions and retrieve privileged MCP-related information.
The MCP information collected from this module is stored in Metasploit loot as a JSON document.
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use auxiliary/gather/langflow/auth_bypass_cve_2026_93680msf undefined(auth_bypass_cve_2026_93680) > show actions ...actions...msf undefined(auth_bypass_cve_2026_93680) > set ACTION < action-name >msf undefined(auth_bypass_cve_2026_93680) > show options ...show and set options...msf undefined(auth_bypass_cve_2026_93680) > runPrioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub