Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Summary

Threat actors are exploiting CVE-2026-105740 (CVSS 9.9) in Langflow, an open-source platform for building AI applications and agentic workflows. The flaw is an authenticated remote code execution issue affecting versions prior to 1.9.0: any authenticated user can add an MCP server with the 'stdio' transport, and its user-supplied command runs via bash -c with no validation. Previdian's honeypots recorded 1,423 exploitation attempts from 27 IP addresses since September 19, 2026, with activity rising from October 11, 2026.

Mitigation

Fixed in 1.9.0 (versions prior to 1.9.0 are affected).

Topics

• Model Context Protocol

Related items

• MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySame vendor · NVD/CVE Database
• HighCVE-2026-106119: LangChain MongoDBChatMessageHistory query injection via session identifierSame vendor · NVD/CVE Database
• LowGHSA-5x6v-p487-7qh2: LangChain: RediSearch Filter Injection via Unescaped Tag/Text ValuesSame vendor · GitHub Advisory Database
• HighGHSA-fvww-7h3r-vfhp: LangGraph SDK custom auth silently ignores actions= on resource decoratorsSame vendor · GitHub Advisory Database
• Info'The hottest skill on Wall Street’: Demand for this AI ability jumped 1,721% as banks embrace agentsSame vendor · CNBC Technology