CVE-2026-105740

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.0

Description Authenticated users can achieve Remote Code Execution (RCE) on the server by adding a Model Context Protocol (MCP) server using the "Stdio" transport. The command field is passed directly to bash -c "exec {command}" without validation, allowlisting, or sandboxing, causing the command to execute immediately when the server list is fetched. Furthermore, the env field allows for arbitrary environment variable injection, such as overriding PATH or using LD PRELOAD. RCE is a security flaw that allows an attacker to execute arbitrary code on a remote machine.

Recommendations Update to version 1.9.0.