Skip to content
OpenAdvisories
High WID-SEC-2026-2619 7 CVEs

IBM Langflow Desktop: Mehrere Schwachstellen

Published Aug 2, 2026 · Updated Aug 5, 2026 · Revision 2 · de-DE

Vendor: IBM Product: Langflow Desktop Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu Manipulieren, und um Sicherheitsvorkehrungen zu umgehen.

Product

IBM Langflow Desktop ist eine lokale Anwendung zur Entwicklung und Ausführung von Langflow-basierten Anwendungen.

Vulnerabilities 7

  • High 8.8
    CVE-2026-17623

    Langflow is affected OS Command Injection in Model Context Protocol features

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-17626

    Langflow is affected by security vulnerabilities in Model Context Protocol features

    IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments.

    IBM Langflow OSS
  • High 8.5
    CVE-2026-9077

    Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features

    IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system.

    IBM Langflow OSS
  • High 7.5
    CVE-2026-8446

    Langflow is affected by security vulnerabilities in Model Context Protocol features

    IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP) composer endpoint when mcp_composer_enabled=true (default) and projects are configured with auth_type=oauth .

    IBM Langflow OSS
  • High 7.2
    CVE-2026-17625

    Langflow is affected by OS Command Injection in Model Context Protocol features

    IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to impr…

    IBM Langflow OSS
  • High 7.2
    CVE-2026-17630

    Langflow is affected by security vulnerabilities in Model Context Protocol features

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters.

    IBM Langflow OSS
  • Medium 6.5
    CVE-2026-7646

    Langflow is affected by security vulnerabilities in Model Context Protocol features

    IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resourc…

    IBM Langflow OSS

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-53473, EUVD-2026-53465, EUVD-2026-53463, EUVD-2026-53464, EUVD-2026-53520, EUVD-2026-53477, EUVD-2026-53478

  2. #1

    Initiale Fassung

References