CVE-2026-17626: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitiv

IBM Langflow OSS versions 1.0.0 through 1.10.3 has a vulnerability where an authenticated attacker (someone with login credentials) can read, modify, or expose sensitive files on the host computer through Docker-based MCP servers (modular components that run in Docker containers) because the software doesn't properly filter dangerous Docker volume-mount and device-mapping arguments (settings that control what files containers can access). An attacker with access to the system could exploit incomplete filtering to access files they shouldn't be able to reach.