{"data":{"id":"8950c959-12f0-4e29-bb07-5a8bf2192bd7","title":"CVE-2026-7755: IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation…","summary":"CVE-2026-7755 affects IBM Langflow OSS versions 1.0.0 through 1.10.0. The flaw is incomplete validation enforcement on MCP server configuration files, which could allow remote code execution. NIST has not yet provided an NVD assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7755","publishedAt":"2026-07-17T20:17:30.137Z","cveId":"CVE-2026-7755","cweIds":null,"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"IBM Langflow OSS remote code execution via MCP server configuration files","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00746,"epssCheckedAt":"2026-11-12T06:11:39.885Z","kevDateAdded":null,"advisoryAliases":["GHSA-m94m-8f9x-f6r4"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T18:10:01.745Z","patchAvailable":null,"disclosureDate":"2026-07-17T20:17:30.137Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}