CVE-2026-17626: IBM Langflow OSS file read and modify via Docker-based MCP servers

Summary

CVE-2026-17626 affects IBM Langflow OSS versions 1.0.0 through 1.10.3. An authenticated attacker can read, modify, or expose sensitive host files through Docker-based MCP servers, because Langflow incompletely filters dangerous Docker volume-mount and device-mapping arguments. The weakness is classified as CWE-266, Incorrect Privilege Assignment. NVD had not yet provided an assessment when the entry was published on 08/05/2026.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Model Context Protocol

Related items

• InfoMicrosoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsSimilar attack · The Hacker News
• HighCVE-2026-63651: LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect…Similar attack · NVD/CVE Database
• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins
• InfoLocation Matters: Sparse Latent-Variance Attacks for Face Privacy against Diffusion PersonalizationSimilar attack · Arxiv (cs.RO + cs.CV security)
• MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySimilar attack · MSRC Security Update Guide