CVE-2026-105740 - Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server
CVE ID :CVE-2026-105740 Published : Oct. 5, 2026, 9:16 p.m. | 2 hours, 11 minutes ago Description :Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by adding an...