Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
CVE-2026-7755 Remote Code Execution in IBM Langflow OSS 1.0.0 Through 1.10.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7755
Post summary
A new RCE vulnerability (CVE‑2026‑7755) affecting IBM Langflow OSS versions 1.0.0 through 1.10.0 has been disclosed; no proof‑of‑concept, exploit, or patch information is included in the text.
A severe vulnerability was disclosed for IBM Langflow (CVE-2026-7755) https://vuldb.com/vuln/379998
Post summary
A severe vulnerability (CVE-2026-7755) affecting IBM Langflow has been disclosed, with a link to more information on VULDB.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | langflow | langflow | - | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |