CVE-2026-17626

Docker-based MCP servers running IBM Langflow OSS versions 1.0.0 to 1.10.3 are vulnerable to exploitation by authenticated attackers, who can read, modify, or expose sensitive host files due to inadequate filtering of Docker volume-mount and device-mapping arguments. Organizations utilizing these versions should prioritize patching to mitigate the risk of data exposure and potential system compromise. Security teams and system administrators managing Docker environments should take immediate action to address this vulnerability.