CVE-2026-105699

Langflow versions 1.6.8 through 1.9.1 are vulnerable to an authenticated cross-project file disclosure due to unscscoped MCP resource handlers. The application validates project identifiers but fails to authorize the resource URI provided to resources/read. Consequently, an attacker can bypass pr...