← Database

CVE-2026-78575

HIGH CVSS: 8.8 Published: 2026-09-10 Modified: 2026-09-16

Description

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in the MCP stdio server configuration.

Affected Platforms

Langflow Langflow

Weakness Type

CWE-78

References