Independent reconstructions of published vulnerabilities. Each one records the root cause, the lab evidence, the vendor fix and what we could not prove.
Filter by collection 2 findings
Finding
Langflow CVE-2026-9198: one request to code execution
Langflow's default auto-login issued a year-long superuser token, and its validator ran submitted code. We rebuilt the chain and the 1.10.1 fix.
18 August 20264 min readFinding
Metabase CVE-2026-72898: from password reset to admin
Extra JSON keys in Metabase's password-reset endpoint became an admin session. We rebuilt the chain and decompiled the 0.63.5 fix.
18 August 20266 min read
Adversary simulation
Want this level of evidence for your own systems?
We test the routes an attacker would take, prove the impact, then replay the test after the fix.