langflow-ai

Wednesday, October 7

• GitHub CVE-2026-105697
  Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

  • langflow-ai langflow
  • Critical
  • CVSS 9.9
  • EPSS 0.47%
  • Fixed version listed
  20:36 UTC