CVE-2026-8446

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3

Description An authentication bypass exists in the Model Context Protocol (MCP) composer endpoint. This occurs when the mcp composer enabled variable is set to true (the default setting) and projects are configured with the auth type variable set to oauth.

Recommendations Update IBM Langflow OSS to a version later than 1.10.3. As a temporary mitigation, set the mcp composer enabled variable to false or change the auth type configuration from oauth.