CVE-2026-78575 | IBM Langflow OSS up to 1.11.5 MCP stdio server command injection

September 10, 2026 Yanac

A vulnerability has been found in IBM Langflow OSS up to 1.11.5 and classified as critical. The affected element is an unknown function of the component MCP stdio server. This manipulation causes command injection.

This vulnerability is registered as CVE-2026-78575. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More