CVE-2026-105741

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol (MCP) configuration installation endpoint (POST /api/v1/mcp/project/{project_id}/install) allowed authenticated remote attackers to bypass the "local-only" access restriction. By sending a spoofed X-Forwarded-For: 127.0.0.1 header, an attacker could make the server treat the request as originating from localhost, letting them write/overwrite an MCP client configuration file on the server's filesystem. This vulnerability is fixed in 1.10.3.

• CWE-290
• CWE-345

• https://github.com/langflow-ai/langflow/commit/1f39a4b9d62c9dfa1b21fa7f85e23a180c351b72
• https://github.com/langflow-ai/langflow/commit/94859df33acd70b2a1f816e26d68f5e89a7e5639
• https://github.com/langflow-ai/langflow/pull/13915
• https://github.com/langflow-ai/langflow/releases/tag/v1.10.3
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-4f6c-2vvp-gw82

Published

Oct 5, 2026

Last Modified

Oct 6, 2026

Status

Awaiting Analysis

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105707A security vulnerability has been detected in uptrace up to …5.3
• CVE-2026-105708A flaw has been found in imgproxy up to 4.0.17. Affected by …4.3
• CVE-2026-10571IBM WebSphere Application Server - Liberty 17.0.0.3 through …5.3
• CVE-2026-105712gpgtar in GnuPG before 2.5.19 can allow file overwrite via c…3.6
• CVE-2026-10573A denial-of-service security issue exists in 1734 POINT I/O™…6.3
• CVE-2026-105740Langflow is a tool for building and deploying AI-powered age…9.9
• CVE-2026-105742Docling simplifies document processing by parsing diverse fo…3.7
• CVE-2026-105743Docling simplifies document processing by parsing diverse fo…4
• CVE-2026-105744Docling simplifies document processing by parsing diverse fo…7.5
• CVE-2026-105745Docling simplifies document processing by parsing diverse fo…6.7
• CVE-2026-105746Docling simplifies document processing by parsing diverse fo…2.2
• CVE-2026-105747Docling simplifies document processing by parsing diverse fo…4.3