CVE-2026-105697 - Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CVE ID :CVE-2026-105697 Published : Oct. 5, 2026, 9:16 p.m. | 2 hours, 11 minutes ago Description :Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server...