IBM Langflow OSS Auth Bypass, pre-1.10.4 allows config file write
CVE-2026-9077 Published on August 5, 2026
Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system.
Vulnerability Analysis
CVE-2026-9077 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a high impact on integrity, and no impact on availability.
Weakness Type
Reliance on Untrusted Inputs in a Security Decision
The application uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.
Products Associated with CVE-2026-9077
Want to know whenever a new CVE is published for IBM Langflow Oss? stack.watch will email you.
Affected Versions
IBM Langflow OSS:- Version 1.0.0, <= 1.10.3 is affected.