CVE-2026-7646

CVE-2026-7646 affects IBM Langflow OSS 1.0.0–1.10.3. Affected component: Model Context Protocol (MCP) resources/read handling. Root cause: URL-encoded path traversal in the filename enables a crafted MCP request to read arbitrary server files (including other users’ documents, JWT signing secret,...

CVE-2026-7646

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP resources/read request with a URL-encoded path...

EUVD-2026-53463

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

CVE-2026-9077

Summary of CVE-2026-9077 (IBM Langflow OSS) : Langflow OSS versions 1.0.0–1.10.3 allow remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host. The vulnerability stems from weaknesses in MCP command/...

CVE-2026-9077

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

CVE-2026-9077 Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

ROOT-APP-PYPI-CVE-2026-55255 CVE-2026-55255 in langflow - Patched by Root

Root has patched CVE-2026-55255 in the langflow package for Root:PyPI. Multiple fixed versions available...

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency CISA, on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 CVSS score: 9.8 - A code injection...

CVE-2026-8478: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...

CVE-2026-8183: Improper Limitation of a Pathname to a Restricted Directory

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot "...

CVE-2026-7869: Improper Limitation of a Pathname to a Restricted Directory

IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker...

PT-2026-68299

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description Remote authenticated attackers can execute arbitrary code due to improper validation of Python code during AST-based security scanning. AST Abstract Syntax Tree is a tree representatio...

PT-2026-68254

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authentication bypass exists in the Model Context Protocol MCP composer endpoint. This occurs when the mcp composer enabled variable is set to true the default setting and projects...

PT-2026-68257

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the application fails to...

PT-2026-68304

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authenticated attacker can execute unintended code during Agentic Assistant validation because the application improperly handles LLM-generated components. The system executes Pytho...

PT-2026-68300

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description A code injection flaw allows a remote authenticated attacker to execute arbitrary code. Recommendations Update IBM Langflow OSS to a version later than 1.10.3...

CVE-2026-9077: Reliance on Untrusted Inputs in a Security Decision

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system...

CVE-2026-7657: Server-Side Request Forgery (SSRF)

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery SSRF due to incomplete and ineffective SSRF protection enforcement...

CVE-2026-9201: Inadequate Encryption Strength

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

CVE-2026-8182: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests...