Loading story…
ProjectDiscovery added Nuclei detection coverage for two high-severity access control issues affecting Langflow and Budibase. One template targets CVE-2026-21445, a broken access control flaw in Langflow that can expose sensitive conversation and transaction data to unauthenticated users and allow destructive actions such as message deletion through exposed API endpoints. The detection logic uses the /api/v1/monitor/messages endpoint, and automated review notes the vulnerability affects versions before the fixed production release Langflow 1.7.1, despite inconsistent versioning in the initial template text. The issue is rated CVSS 9.1.
A second template was introduced for CVE-2026-31816, an authentication bypass in Budibase caused by improper regex validation in authorization middleware. The template attempts to detect the flaw by sending a crafted POST request to a user search endpoint using a webhook query-parameter pattern that could bypass authorization checks and enable user enumeration. ProjectDiscovery's automated review flagged implementation problems in the draft template, including an undefined variable, incorrect CWE mapping, missing vendor metadata, and weak matchers that could lead to false positives, but the underlying vulnerability was still classified as critical with a CVSS 9.1 score.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
A pull request was opened in ProjectDiscovery's nuclei-templates repository to add detection for the Budibase authentication bypass. Automated review identified issues including an undefined variable, incorrect CWE mapping, missing vendor metadata, and weak matchers that could lead to false positives.
A pull request was published in the nuclei-templates repository adding detection coverage for the Langflow vulnerability using the /api/v1/monitor/messages endpoint. The accompanying review said the template had been validated against both vulnerable and patched targets and flagged a remediation-version inconsistency.
CVE-2026-31816 was identified in Budibase as an authentication or authorization bypass caused by improper regex validation in authorization middleware. The issue could allow unauthorized user enumeration via a crafted request to a user search endpoint, and the template metadata rates it CVSS 9.1.
A critical broken access control vulnerability, CVE-2026-21445, was disclosed in Langflow, allowing unauthenticated access to sensitive conversation and transaction data and enabling destructive actions such as message deletion through exposed API endpoints. Review notes indicate the fixed production release is Langflow 1.7.1, despite inconsistent remediation version text in the template.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
github.com
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two high-severity vulnerabilities were disclosed affecting exposed application and device management surfaces, including a flaw that can give attackers **root access** and another that enables **arbitrary file write** through path traversal. **CVE-2026-3587** describes an unauthenticated remote attack path in a hidden CLI function that lets an attacker escape a restricted prompt and gain root access to the underlying Linux operating system, potentially leading to full device compromise. The issue was mapped to `CWE-912` and assigned a `CVSS v3.1` score vector of `AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`, with CERT VDE publishing advisory `VDE-2026-020`. A separate vulnerability, **CVE-2026-5027**, affects Langflow's `POST /api/v2/files` endpoint, where improper sanitization of the multipart `filename` parameter allows path traversal using `../` sequences. An authenticated attacker can exploit the bug to write files to arbitrary filesystem locations, creating a route to compromise confidentiality, integrity, and availability. The flaw was classified as `CWE-22`, carries the `CVSS v3.1` vector `AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, and is referenced in Tenable advisory `TRA-2026-26`.
Jun 29, 2026
A critical vulnerability tracked as **CVE-2026-9198** allows unauthenticated remote code execution against default-configured **Langflow OSS** deployments by chaining two exposed API behaviors. According to IBM's security bulletin, the `/api/v1/auto_login` endpoint can issue **SUPERUSER** bearer tokens to any network caller, and the `/api/v1/validate/code` endpoint then executes attacker-controlled Python through `exec()`. IBM said the validator can trigger execution through Python decorators, default arguments, and annotations at function definition time, giving attackers arbitrary command execution on the host. The issue affects Langflow OSS versions **1.0.0 through 1.10.0**, carries a **CVSS 3.1 score of 9.8**, and has no listed workaround. A draft **Metasploit Framework** pull request adds an exploit module for the flaw and says successful exploitation can yield a **Meterpreter** session on vulnerable systems. The module author reported testing against **Langflow 1.8.4 on Ubuntu 22.04**, describing the attack as unauthenticated and effective on default deployments. The pull request also links the bug to **CISA KEV**, underscoring active operational relevance, while IBM advises organizations to upgrade to **Langflow OSS 1.10.1** to remediate the exposure.
Aug 11, 2026
ProjectDiscovery's `nuclei-templates` repository received several pull requests adding or refining detection logic for newly disclosed web vulnerabilities. Proposed templates covered **CVE-2026-0561** for cross-site scripting, **CVE-2025-69411** for a high-severity path traversal/local file read in the WordPress plugin `ioncube-tester-plus`, **CVE-2026-1405** for a critical SSRF issue in a WordPress REST API endpoint, and an unauthenticated remote command execution flaw in **Synway SMG Gateway** via `9-2radius.php`. The submissions generally reported validation against vulnerable and patched targets to reduce false positives, with several marked ready for merge pending maintainer review. The WordPress `ioncube-tester-plus` template demonstrated file disclosure through `loader-wizard.php` by abusing the `ininame` parameter to retrieve `/etc/passwd`, while the `slider-future` WordPress template showed SSRF by sending an external `image_url` to `/wp-json/slider-future/v1/upload-image/` and confirming outbound DNS interaction through OAST. The Synway SMG Gateway submission described command injection through the `radius_address` parameter reaching a `system()` call, but automated review flagged template quality problems including weak matching logic and missing metadata. Separately, a fix was proposed for the **CVE-2025-71243** template after reports of frequent false positives, replacing reflection-based checks with `md5`-based proof of code execution to improve accuracy.
Jun 29, 2026