8.8

CVE-2026-17626

EPSS 0.29%
Veröffentlicht 05.08.2026 16:31:13
Zuletzt bearbeitet 06.08.2026 19:35:09
CVE-Watchlists
Login
Unerledigt
Login

Langflow is affected by security vulnerabilities in Model Context Protocol features

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Langflow ≫ Langflow Version >= 1.0.0 < 1.11.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.29%	0.208

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-266 Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

https://www.ibm.com/support/pages/node/7282147

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-17626

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-17626

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-17626

EUVD