CVE-2026-7755

MCP Server Configuration Validator Bypass via File Upload API PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.0

CWE

No CWE identifiers supplied.

References

https://www.ibm.com/support/pages/node/7278932

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.