CVE-2026-110186

Name of the Vulnerable Software and Affected Versions Langflow OSS versions 1.0.0 through 1.12.8

Description Improper control of code generation allows an unauthenticated remote attacker to execute arbitrary code on the server. This issue also involves an unauthenticated code-execution exposure related to MCP tool enumeration, where MCP (Model Context Protocol) is a standard for connecting AI models to external data sources and tools.

Recommendations Upgrade to Langflow OSS version 1.13.0. Restrict access to exposed MCP interfaces. Review execution logs for anomalies.