CVE-2026-9077: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictio
Summary
CVE-2026-9077 is a vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.3 that allows authenticated attackers (users with login credentials) to bypass localhost-only restrictions, which are security limits meant to prevent remote access. Attackers can exploit this to write arbitrary MCP server configurations (settings for external server connections) to IDE configuration files on the host system. The vulnerability stems from reliance on untrusted inputs in security decisions without proper validation.
Vulnerability Details
8.5(high)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N
network
low
low
none
August 5, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-9077
First tracked: August 5, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 85%