High nvd · CVE-2026-8446

CVE-2026-8446: IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP)

Published Aug 5, 2026 CVSS 7.5

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP) composer endpoint when mcp_composer_enabled=true (default) and projects are configured with auth_type=oauth .

Auth Bypass Agentic / MCP

Affected AI Products

model context protocol langflow

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.