CVE-2026-9186: IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration i

IBM Langflow OSS versions 1.0.0 through 1.11.2 have a security weakness where attackers who are logged in can trick the system into thinking they are accessing from localhost (the local computer) by faking an X-Forwarded-For header (a piece of information that says where a request came from). This allows them to bypass security restrictions and modify important configuration files that control IDE (integrated development environment, the tool programmers use to write code) settings.