SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-7755

HIGH · CVSS 8.8 EPSS 0.41% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

IBM Langflow versions 1.0.0 through 1.10.0 are vulnerable to remote code execution due to insufficient validation of MCP server configuration files. This flaw could allow an attacker to execute arbitrary code on the affected systems, potentially compromising the integrity and confidentiality of the environment. Organizations using these versions of Langflow should prioritize patching to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-7755
Severity
HIGH
CVSS
8.8
EPSS
0.41%

Original NVD Description

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-84351 HIGH CVE-2026-84334 HIGH CVE-2026-84329 MEDIUM CVE-2026-3627 CRITICAL CVE-2026-19295 CRITICAL CVE-2026-19294 MEDIUM