High severity8.8NVD Advisory· Published Jul 17, 2026· Updated Jul 23, 2026

CVE-2026-7755

Description

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

Affected products

IBM/Langflow OSSllm-create
Range: 1.0.0 - 1.10.0
Langflow AI/Langflow
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
Range: >=1.0.0,<1.10.1

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7278932nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000