Metasploit Pro Version 5.1.0-2026110301 Release Notes

Software release date: November 3, 2026 | Release notes published: November 4, 2026

New Module Content (3)

#21875 - Adds a new exploit module that detects and exploits an unauthenticated remote code execution vulnerability impacting Langflow versions 1.0.0 through 1.9.3.
#21939 - Adds a new exploit module that detects and exploits an authenticated blind command injection vulnerability impacting Langflow versions 1.5.0 through 1.9.0.
#22006 - Adds a new scanner that identifies Apache Solr and reports its version.

Pro: Adds performance improvements and memory usage logging.
#22041 - Adds multiple Meterpreter improvements. The Windows Meterpreter has a major reflective-loader/IAT-import reduction, as well as improved WinAPI/error handling, and MinGW/CMake build refinements. The Python Meterpreter has improvements to Windows stat support and FreeBSD process listing. The PHP Meterpreter resolves PHP UDP channel read bugs. All Meterpreters now align on recursive mkdir -p capabilities.

Pro: Updates the cacert bundle in Metasploit Pro to no longer contain the eMudhra intermediate certificates.
Pro: Removes eMudhra intermediate CA certificates from Java dependency.
Pro: Fixes a memory leak issue that could occur every 6 hours during routine background update checks.
Pro: Improves the handling of non-ASCII characters.
Pro: Updates incorrect help text for tagging imported hosts.
#22001 - Fixes DirtyClone metadata and typo.