PulseAugur
EN
LIVE 00:11:48

Critical RCE vulnerability in Langflow allows arbitrary command execution

By PulseAugur Editorial · [1 sources] ·

A critical remote code execution vulnerability, CVE-2026-105740, has been discovered in Langflow, an open-source platform for building AI applications. The flaw, rated 9.9/10, allows any authenticated user to execute arbitrary commands on the host system by exploiting the command field in MCP server configurations without proper validation. This vulnerability affects all versions prior to 1.9.0 and has reportedly been exploited in the wild since September 2026, with attackers attempting to steal sensitive environment variables and access host files. AI

IMPACT This critical vulnerability in Langflow could lead to compromised AI application deployments, necessitating immediate patching or security hardening.

RANK_REASON This is a security vulnerability report for a specific software product, not a frontier release or significant industry event.

Read on dev.to — MCP tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Critical RCE vulnerability in Langflow allows arbitrary command execution

How we ranked this

Signal score
34 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
This is a security vulnerability report for a specific software product, not a frontier release or significant industry event.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — MCP tag TIER_1 English(EN) · RC ·

    Langflow pipes commands into bash

    <p>CVE-2026-105740 lets any authenticated Langflow user run arbitrary commands on the host, and the cause is about as plain as RCE gets: the command field for an MCP server is passed straight into <code>bash -c "exec {command}"</code> with no allowlist, no sandbox, and no validat…

RELATED ENTITIES

RELATED TOPICS