Remote Code Execution Vulnerability in Langflow by Langflow AI

CVE-2026-105740

What is CVE-2026-105740?

Langflow, a tool for building AI-powered agents, exhibits a security vulnerability that allows authenticated users to execute arbitrary commands on the server. This occurs when an MCP server is added using the 'Stdio' transport, where the command field is directly executed in a bash environment without any form of validation or security checks. Moreover, the ability to inject arbitrary environment variables exacerbates the risk. The issue has been addressed in version 1.9.0, which mitigates this security flaw.

References