Unrated severityNVD Advisory· Published Jul 17, 2026· Updated Jul 23, 2026

MCP Server Configuration Validator Bypass via File Upload API

CVE-2026-7755

Description

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

Affected products

IBM/Langflow OSSllm-create
Range: 1.0.0 - 1.10.0

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7278932mitrevendor-advisorypatch

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000