Improper Authorization

Langflow is vulnerable to improper authorization. The vulnerability is due to insufficient validation of resource URIs and failure to verify flow ownership in project-scoped MCP connections, which allows an attacker with access to an MCP endpoint to read other users’ private flow files, including...

GHSA-6XPM-GGF7-WC3P mcp-remote exposed to OS command injection via untrusted MCP server connections

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorizationendpoint response URL...