UpHeron
All vulnerabilities

Servers and applications

CVE-2026-105740

Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

Severity
Critical 9.9
Published
10 Sept 2026
Last changed
6 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.9.0
Also known as
GHSA-7w94-79vh-5mr2
Sources
CVE Program, Project advisories (GitHub)

Description

Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

Affected software

SoftwareAffected versions
LangflowServers and applications · cna:langflow-ai|langflow
  • Every version before 1.9.0
LangflowServers and applications · github:langflow-ai/langflow
  • Version 1.8.3

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-105740
  • GitHub Advisory Database https://github.com/advisories/GHSA-7w94-79vh-5mr2
  • github.com https://github.com/langflow-ai/langflow/security/advisories/GHSA-7w94-79vh-5mr2