Langflow is a tool for building and deploying AI-powered agents and workflows.
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and (before 1.10.3) wrapped in bash -c "exec {command} ...". Any user able to reach the MCP server settings ("Settings → MCP Servers → Add MCP Server", POST/PATCH /api/v2/mcp/servers/{server_name}) or to build a flow with the MCP Tools component could add a "server" whose command is an arbitrary OS command (touch, rm -rf, a reverse shell, ...). The command runs on the Langflow
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Anthropic
- Product
- Claude, AI / LLM tooling
- CVSS
- 9.9
- EPSS
- 0.008 (p56)
- Exposure class
- AI infrastructure
Why it ranks 23 (Routine)
- CVSS 9.9 critical
- Product class: AI infrastructure
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-105697 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.