{"data":{"id":"4dabfc8a-7b83-4fc5-9596-4b043992704b","title":"CVE-2026-6599: A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function…","summary":"A vulnerability was detected in langflow-ai langflow up to 1.8.3. The flaw sits in the function get_client_ip/install_mcp_config in src/backend/base/langflow/api/v1/mcp_projects.py, part of the Model Context Protocol Configuration API. Manipulating the X-Forwarded-For argument results in injection, and the attack may be initiated remotely. A public exploit exists, and the vendor did not respond to early disclosure.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-6599","publishedAt":"2026-04-20T04:16:53.060Z","cveId":"CVE-2026-6599","cweIds":["CWE-74","CWE-707"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langflow@<= 1.8.3"],"affectedPackageNames":["langflow"],"affectedPackageRefs":["pypi:langflow"],"affectedVendors":[],"affectedVendorsRaw":["Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Langflow injection through X-Forwarded-For in MCP project configuration API","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00393,"epssCheckedAt":"2026-10-14T06:09:07.174Z","kevDateAdded":null,"advisoryAliases":["GHSA-v66p-f7x3-4794"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:25.532Z","patchAvailable":null,"disclosureDate":"2026-04-20T04:16:53.060Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}