[CVE-2026-7755] IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete v…

Descripción técnica

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Modified

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Langflow, Macos, Linux kernel, Windows — Langflow, Apple, Linux

Debilidades (CWE)

CWE-20

Fuente oficial

Publicado en NIST NVD.