CVE-2026-105699 | langflow-ai Langflow up to 1.9.0 MCP Connection read_resource improper authorization

October 5, 2026 Yanac

A vulnerability was found in langflow-ai Langflow up to 1.9.0. It has been declared as problematic. This impacts the function read_resource of the component MCP Connection. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-105699. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More