CVE-2026-9077

IBM Langflow versions 1.0.0 to 1.10.3 are vulnerable to a remote authenticated attack that allows bypassing localhost-only restrictions, enabling attackers to write arbitrary MCP server configurations to IDE configuration files on the host system. This could lead to unauthorized access and manipulation of the system's configuration, potentially compromising its integrity and security. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation.