CVE-2026-17623 | IBM Langflow OSS up to 1.10.3 MCP Server Configuration command code injection

August 5, 2026 Yanac

A vulnerability, which was classified as critical, has been found in IBM Langflow OSS up to 1.10.3. Impacted is an unknown function of the component MCP Server Configuration. The manipulation of the argument command leads to code injection.

This vulnerability is listed as CVE-2026-17623. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More