Tools AI Risk Radar ai-incident-0142
Incident record
Langflow fixes command execution through MCP settings
- Severity
- Critical
- Status
- Patched
- Type
- Infra Vuln
- Target
- langflow, langflow-base, lfx
- Actor
- researcher
- CVE
- CVE-2026-105697
What happened
A user able to configure an MCP server or build an MCP Tools flow could make the Langflow host run an arbitrary command. An exposed installation using development auto-login could grant access without an account; other configurations required an authenticated user.
langflow: affected >= 1.1.2, < 1.10.3; fixed in 1.10.3. langflow-base: affected >= 0.1.2, < 0.10.3; fixed in 0.10.3. lfx: affected < 1.10.3; fixed in 1.10.3. The date shown is the maintainer’s original disclosure date. Its advisory assigns 9.9 under CVSS 3.1.
Sources
- Primary disclosuregithub.com/langflow-ai/langflow/security/advisories/GHSA-w79…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026