CVE ID :CVE-2026-7664 Published : June 22, 2026, 2:10 p.m. | 2 hours, 59 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-7664 - Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSS

VERWANDTEARTIKEL

CVE-2026-41049 - Caching of Authentication allows Authentication Bypass between users in qSnapper

CVE-2026-41045 - Weak polkit authentication check in qSnapper

CVE-2026-9072 - IBM i is Affected By Denial of Service, HTTP Request Smuggling, and Remote Code Execution Vulnerabilities in IBM WebSphere Application Server Liberty [, , , , ]

CVE-2026-56104 - Chainlit < 2.10.1 Session Hijacking via WebSocket Session Restoration

CVE-2026-12628 - Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system

CVE-2026-10561 - Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection