Logo
Retour à la veille

CVE-2026-105740

Publié : 5 octobre 2026
Modifié : 5 octobre 2026
Lien officiel NVD
Score CVSS
9.9
CRITICAL

Description détaillée

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exec {command}" with zero validation, no allowlisting, and no sandboxing. The command executes immediately when the server list is fetched. Additionally, the env field allows arbitrary environment variable injection (e.g., LD_PRELOAD, PATH override). This vulnerability is fixed in 1.9.0.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Références et Patchs

https://github.com/langflow-ai/langflow/commit/efbc4a16e639409d938a4883463d27ef0bc637a0https://github.com/langflow-ai/langflow/pull/12290https://github.com/langflow-ai/langflow/security/advisories/GHSA-7w94-79vh-5mr2https://github.com/langflow-ai/langflow/security/advisories/GHSA-w794-rj3p-xv45

Dernières Vulnérabilités

CVE-2026-93321

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.

VOIR DÉTAILS

CVE-2026-93315

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build.

VOIR DÉTAILS

CVE-2026-91107

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.

VOIR DÉTAILS