· The Patch
The Patch
The Patch — June 20, 2026
Langflow's June 19 batch closes two criticals — an arbitrary-file-read that chains to RCE (CVE-2026-55447, 9.6) and an IDOR that runs anyone's flow (CVE-2026-55255, 9.9), both fixed in 1.9.2 — alongside a wave of unauthenticated MCP-server advisories.
Jun 20, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 20, 2026