high8.8
CVE-2026-7755
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.
Impact
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Langflow | Langflow | from 1.0.0 before 1.10.1 |