Bhutan Computer Incident Response Team btcirt.bt

Authenticated Remote Code Execution in Langflow via MCP Stdio Transport (CVE-2026-105740) -20261013009

Imported from official source

October 14, 2026 13:41 Announcement

Cybersecurity Classified by Officially

Severity CRITICAL Threat Category Vulnerability – OS Command Injection / Remote Code Execution (CWE-78) Affected Platforms Langflow (langflow-ai) self-hosted AI […] The post Authenticated Remote Code Execution in Langflow via MCP Stdio Transport (CVE-2026-105740) -20261013009 first appeared on Bhutan Computer Incident Response Team.

This is an extract. The publication continues at the source.

Read the original at the source: https://btcirt.bt/authenticated-remote-code-execution-in-langflow-via-mcp-stdio-transport-cve-2026-105740-20261013009/

Officially imported this from Bhutan Computer Incident Response Team’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Bhutan Computer Incident Response Team — imported from official source
Official source: https://btcirt.bt/category/newsevents/advisory/feed/ RSS
Imported: October 14, 2026 14:30
Versions: 1 recorded
Identity: https://btcirt.bt/?p=39118