{"data":{"id":"1152e18d-f1a4-4535-afca-2987af95e254","title":"CVE-2026-9186: IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration i","summary":"IBM Langflow OSS versions 1.0.0 through 1.11.2 have a security weakness where attackers who are logged in can trick the system into thinking they are accessing from localhost (the local computer) by faking an X-Forwarded-For header (a piece of information that says where a request came from). This allows them to bypass security restrictions and modify important configuration files that control IDE (integrated development environment, the tool programmers use to write code) settings.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-9186","publishedAt":"2026-09-04T15:17:50.860Z","cveId":"CVE-2026-9186","cweIds":["CWE-284"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow","Cursor"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-04T15:17:50.860Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}