AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-17623

HIGH · CVSS 8.8 EPSS 0.96%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

IBM Langflow OSS versions 1.0.0 to 1.10.3 are vulnerable to remote command execution due to inadequate validation of the command field in MCP server configurations. This flaw allows authenticated attackers to execute arbitrary commands, potentially compromising the integrity and availability of the affected systems. Organizations using these versions should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-17623
Severity
HIGH
CVSS
8.8
EPSS
0.96%

Original NVD Description

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-9205 HIGH CVE-2026-9201 HIGH CVE-2026-9196 HIGH CVE-2026-9130 HIGH CVE-2026-8478 HIGH CVE-2026-8470 HIGH