CVE-2026-7646

MEDIUM

Langflow is affected by security vulnerabilities in Model Context Protocol features

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-7646 has a selected CVSS score of 6.5 (medium).

Description

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 5, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Langflow OSS

Browse IBM / Langflow OSS
CVE List1.0.0 to ≤ 1.10.3affected

References

2