CVE-2026-9077

Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system.

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.10.3

CWE

CWE-807

References

https://www.ibm.com/support/pages/node/7282147

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.