@stackflag.bsky.socialCVE-2026-105740 - langflow
Versions of Langflow before 1.9.0 allow anyone with a valid account to add a special MCP connection that runs whatever text they enter as a system command. This can give the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-105697 - langflow
If an attacker can change the MCP server settings in Langflow, they can make the software execute any operating‑system command, such as deleting files or opening a backdoor.…
Too many irrelevant or confusing CVEs? Use stackflag.com