exploitDog

GHSA-m94m-8f9x-f6r4

Опубликовано: 17 июл. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 8.8

Описание

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

Ссылки

EPSS

Процентиль: 34%

0.00415

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-20

Связанные уязвимости

CVE-2026-7755

CVSS3: 8.8

nvd

18 дней назад

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

EPSS

Процентиль: 34%

0.00415

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-20