threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with automatic code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threa...

CVE-2026-9198

CVE-2026-9198 漏洞原因： IBM Langflow OSS是一个专门用于构建和部署Agent自动化工作流的开源软件 IBM Langflow OSS 1.0.0 到 1.10.0默认开启了自动登录（autologin 为true） 这个模式下访问/api/v1/autologin端点会直接返还超级用户token令牌 使用这个令牌可以访问/api/v1/validate/code端点 POST /api/v1/validate/code这是一个验证端点，但会对提交的源代码中的每个函数定义validatecode进行编译和exec 验证...

langflow-exploit

CVE-2025-3248 - Langflow コード検証エンドポイント RCE Langflowのコード検証エンドポイントにおけるリモートコード実行の脆弱性を示す概念実証エクスプロイトです。この脆弱性はLangflow 1.3.0より前のバージョンに影響し、認証されていない攻撃者が細工したHTTPリクエストを通じて任意のコードを実行できるようにします。 脆弱性の詳細 CVE ID : CVE-2025-3248 影響を受けるバージョン : "" 例: root@kitploit: python3 cve-2025-3248.py cmd http://target:7860 "id"...

CVE-2025-3248-Langflow-RCE

CVE-2025-3248 — Langflow 인증되지 않은 원격 코드 실행 CVE-2025-3248 에 대한 개념 증명PoC 익스플로잇으로, AI/LLM 워크플로우 구축 플랫폼인 Langflow의 인증되지 않은 원격 코드 실행 취약점입니다. 영향받는 버전: Langflow 1.3.0 수정된 버전: 1.3.0 취약점 분류: 인증되지 않은 RCE CWE-94, 코드 인젝션 상태: 봇넷에 의해 실제 환경에서 악용되는 것이 관찰된 후 CISA의 알려진 악용 취약점 카탈로그에 추가됨. 근본 원인 Langflow는 UI예: 사용자 정의...

exposecheck

EXPOSECHECK Only run against servers you own or are authorized to test. Scope: a passing result means only that this narrow check found an authentication challenge and a Langflow version at or above the patched threshold for CVE-2025-3248. It is not a general security, reputation, configuration, ...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow 자동 로그인 우회를 통한 인증되지 않은 RCE 교육용 PoC 이 저장소는 IBM Langflow OSS에 영향을 미치는 CVE-2026-9198 에 대한 교육용 개념 증명 을 제공합니다. 이 PoCpoc.py는 인증되지 않은 공격자가 다음을 연쇄적으로 사용하여 원격 코드 실행을 달성하는 방법을 보여줍니다: 1. GET/POST /api/v1/autologin 자동 로그인이 활성화된 경우 슈퍼유저 토큰 반환, 그리고 2. POST /api/v1/validate/code 공격자가...

Security Bulletin: Code Injection Vulnerability in Code Validation Endpoint

Summary A code injection vulnerability was identified in the code validation endpoint that allowed authenticated users to execute arbitrary code on the server. The vulnerability existed in the validation logic which compiled and executed function definitions to check for import errors. Attackers...

SUSE CVE-2026-68445

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4gemobjectmmap rejects a writable mapping of a validated shader BO, but leaves VMMAYWRITE set. Userspace can map the BO read-only and then turn it writable with mprotec...

langflow-exploit

CVE-2025-3248 - Langflow Code Validation Endpoint RCE A proof...

CVE-2026-17632 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

CVE-2026-17632

CVE-2026-17632 affects IBM Langflow OSS versions 1.0.0–1.10.3. The vulnerability arises from improper validation of Python code during AST-based security scanning, enabling a remote authenticated attacker to execute arbitrary code. The NVD/CVE listings report a high-severity vector with CVSS 3.1:...

CVE-2026-8481

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

EUVD-2026-45275

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-8481 Remote Code Execution via Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with /api/v1/validate/code executes user code via exec to achieve full RCE on default Langflow deployments...

CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with /api/v1/validate/code executes user code via exec to achieve full RCE on default Langflow deployments...

CVE-2026-9198

IBM Langflow OSS versions 1.0.0–1.10.0 are affected by an unauthenticated remote code execution (RCE) vulnerability that chains two endpoints: /api/v1/auto_login (which mints a superuser token for callers when AUTO_LOGIN is enabled) and /api/v1/validate/code (which executes user-supplied Python c...

CVE-2026-7873 Code Injection Vulnerability in Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

CVE-2026-57959

Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before asynchronous UpdateEventStatisticsJob increments it, allowing attackers to redeem limited promo codes unlimited times. Attackers can sequentially reserve multiple orders with the...