CVE-2026-105697
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CVSS score
9.9
EPSS probability
%0.5
Risk score
0.0
Published
14 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of
Similar Vulnerabilities
9.8
CVE-2025-3248 Actively exploitedLangflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
Patch verified Public Exploits:3EPSS %100
9.3
9.8
CVE-2026-42208 Actively exploitedSQL injection in Litellm
Patch verified Public Exploits:6EPSS %6
9.8
CVE-2026-111058Mercury: Unauthenticated Remote Code Execution via /api/kernels
Patch status unknown
6.5
CVE-2026-48710 Actively exploitedStarlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Patch verified Public Exploits:2EPSS %7
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-105697"