{"data":{"id":"3a32bf59-2bd3-4b77-ae1b-cecbc7046e8b","title":"CVE-2026-9077: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictio","summary":"CVE-2026-9077 is a vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.3 that allows authenticated attackers (users with login credentials) to bypass localhost-only restrictions, which are security limits meant to prevent remote access. Attackers can exploit this to write arbitrary MCP server configurations (settings for external server connections) to IDE configuration files on the host system. The vulnerability stems from reliance on untrusted inputs in security decisions without proper validation.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-9077","publishedAt":"2026-08-05T17:16:57.510Z","cveId":"CVE-2026-9077","cweIds":["CWE-807"],"cvssScore":"8.5","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["IBM Langflow"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-05T17:16:57.510Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}