CVE-2026-7663

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2026-06-30

Last modified

2026-10-25

Weaknesses

CWE-285, CWE-863

Affected products

• Langflow Oss (Ibm)
• Langflow (Langflow)

References

• https://www.ibm.com/support/pages/node/7277570