This wrap-up comes from the beautiful country of Belgium, where the Metasploit team is team-building and team-eating while we cheer on our very own teammates giving talks - shout-out to @jburgess-r7 who gave a wonderful talk about some of his 0day research.
Team building is a wonderful corporate ritual in which security researchers — people whose job is to break stuff and find ways into places they shouldn't be — are released into hotels full of questionable tech, and then everyone acts surprised by what happens next. So far, the only leak has been the Manneken Pis.
Anyway, while we were busy learning that a country with three official languages still has zero words for "one waffle is enough," the internet continued to be on fire.
We’re gonna jump right into the deep end. GitLab. Unauthenticated. Arbitrary file read. Exploited in the wild. That’s it. If you're reading this and your self-hosted GitLab is running anything from 18.7 up to the fixed versions, please stop reading and go patch.
Next, for anyone who has ever wanted to become the DNS server for an entire Windows network without the hassle of asking permission, we now have native mitm6-style DHCPv6 and IPv6 RA DNS takeover modules. Remember that IPv6 stack you never configured, never use, and definitely never disabled? Windows remembers. Windows is very happy to accept a new DNS server from a stranger who asks nicely.
And finally, Langflow brings us authenticated RCE via custom components, continuing the proud AI-industry tradition of building a feature that lets users run arbitrary Python and then being shocked when users run arbitrary Python.
New module content (5)
GitLab Unauthenticated Arbitrary File Read
Authors: guneykabel, jheysel-r7, and s3ntago
Type: Auxiliary
Pull request: #21910 contributed by jheysel-r7
Path: gather/gitlab_file_read_cve_2026_85706
CVE reference: CVE-2026-85706
Description: Adds a module that exploits CVE-2026-85706, an unauthenticated local file read in the GitLab repository commits and files APIs. The issue affects GitLab CE and EE versions from 18.7
before 19.1.8
, 19.2
before 19.2.6
, and 19.3
before 19.3.2
.
DHCPv6 DNS Takeover (mitm6-style IPv6 DNS coercion)
Author: Pushpender Rathore
Type: Auxiliary
Pull request: #21725 contributed by Pushpenderrathore
CVE reference: CVE-2026-20929
Description: This adds the auxiliary/spoof/ipv6/ipv6_ra_dns_takeover and auxiliary/spoof/dhcp/dhcpv6_dns_takeover modules to enable native IPv6 DNS-takeover coercion as part of a Kerberos authentication relay attack chain. Operating as a rogue IPv6 router and a rogue DHCPv6 server respectively, these modules trick modern Windows and RFC 8106 clients into adopting the attacker as their recursive DNS server.
This PR adds the following modules:
spoof/dhcp/dhcpv6_dns_takeover
spoof/ipv6/ipv6_ra_dns_takeover
Langflow AI Custom Component Authenticated RCE
Author: Richard Howe
Type: Exploit
Pull request: #21848 contributed by rmhowe425
Path: multi/http/langflow_auth_rce_cve_2026_18729
CVE reference: CVE-2026-18729
Description: This adds a new exploit module that detects and exploits an authenticated remote code execution vulnerability tracked as CVE-2026-18729 impacting Langflow versions 1.11.1 and below.
Kate Plugin Persistence
Author: h00die
Type: Exploit
Pull request: #21461 contributed by h00die
Path: multi/persistence/kate_plugin
Description: This adds a multi platform persistence module for Kate.
Enhanced Modules (1)
Modules which have either been enhanced, or renamed:
- #21770 from e2002e - This updates the ZoomEye search module to prevent infinite loops and list truncation when encountering empty result pages. It introduces a three-attempt retry limit that skips to the next page if exceeded, caps results per page at 10 to minimize data loss, and refactors the module to support the ZoomEye v2 API.
Enhancements and features (1)
- #21892 from cdelafuente-r7 - This updates the AGENTS.md file with more granular rules outlining to how to write modules and their corresponding documentation files.
Bugs fixed (9)
- #21823 from DanielSwift1992 - Fixes typos in several GitHub workflows.
- #21880 from adfoster-r7 - Update the iOS image gather module to use
store_loot
for consistency with other modules. - #21881 from adfoster-r7 - Ensure auth is available on the credentials endpoints.
- #21885 from adfoster-r7 - Adds additional validation to the marshal validator.
- #21905 from sjanusz-r7 - Fixes broken encoders, previously both
x86/xor_poly
andx86/avoid_underscore_tolower
were returning errors when attempting encoding. - #21916 from adfoster-r7 - Updates the
db_import
validation logic to be consistent across the different import data types. - #21917 from sjanusz-r7 - Adds additional validation to the credential model updates.
- #21918 from adfoster-r7 - Adds additional validation to the RDP protocol support to handle unexpected sizes packets and responses.
- #21930 from adfoster-r7 - Replace recursive call to dn expand.
Documentation
You can find the latest Metasploit documentation on our docsite at docs.metasploit.com.
Get it
As always, you can update to the latest Metasploit Framework with msfupdate
and you can get more details on the changes since the last blog post from
GitHub:
If you are a git
user, you can clone the Metasploit Framework repo (master branch) for the latest.
To install fresh without using git, you can use the open-source-only Nightly Installers or the
commercial edition Metasploit Pro