Authenticated Remote Code Execution in Langflow via MCP Stdio Transport (CVE-2026-105740) -20261013009

Bhutan Computer Incident Response Team Version 1 original current

Imported from official source

Severity CRITICAL Threat Category Vulnerability – OS Command Injection / Remote Code Execution (CWE-78) Affected Platforms Langflow (langflow-ai) self-hosted AI […] The post Authenticated Remote Code Execution in Langflow via MCP Stdio Transport (CVE-2026-105740) -20261013009 first appeared on Bhutan Computer Incident Response Team.

This version

Version
1 of 1
Recorded
October 14, 2026 14:30
Change
Initial
Content hash
7c0555a5e1b1528fda76e115bb3b64dc
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.