CVE-2026-9186 — Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrus…

CVE-2026-9186

Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust PUBLISHED

Description (CNA)

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, enabling arbitrary writes to IDE config files (~/.cursor/mcp.json, etc.).

Affected (CNA)

Vendor / product	Versions
IBM / Langflow OSS	affected 1.0.0 through 1.11.2

CWE

CWE-284

References

https://www.ibm.com/support/pages/node/7285646

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.