CVE-2026-17626 — Langflow is affected by security vulnerabilities in Model Context Protocol features

CVE-2026-17626

Langflow is affected by security vulnerabilities in Model Context Protocol features PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.3

CWE

CWE-266

References

https://www.ibm.com/support/pages/node/7282147

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.