High nvd · CVE-2026-9077

CVE-2026-9077: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictio

Published Aug 5, 2026 CVSS 8.5

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system.

Agentic / MCP

Affected AI Products

mcp server langflow

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.