Authenticated Remote Code Execution in Langflow via MCP Stdio Transport (CVE-2026-105740) -20261013009
Imported from official source
Severity CRITICAL Threat Category Vulnerability – OS Command Injection / Remote Code Execution (CWE-78) Affected Platforms Langflow (langflow-ai) self-hosted AI […] The post Authenticated Remote Code Execution in Langflow via MCP Stdio Transport (CVE-2026-105740) -20261013009 first appeared on Bhutan Computer Incident Response Team.
This version
- Version
- 1 of 1
- Recorded
- October 14, 2026 14:30
- Change
- Initial
- Content hash
7c0555a5e1b1528fda76e115bb3b64dc- All versions
- Revision history