IBM's bulletin for the open-source Langflow AI agent-builder flags two critical flaws: CVE-2026-93680 (CVSS 9.8, authentication bypass reachable with no account) and CVE-2026-110186 (CVSS 9.8), described as unauthenticated remote code execution exploitable through Model Context Protocol tool enumeration — Langflow can expose its flows as MCP tools to AI applications.