https://vulnerability.circl.lu/sightings/feed 2026-10-09T02:53:25.568945+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/78cb59ad-ea7f-40ae-96d9-8ac390da9de7/export 2026-10-09T02:53:25.597688+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78cb59ad-ea7f-40ae-96d9-8ac390da9de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105697", "type": "seen", "source": "https://gist.github.com/alon710/6614304235c0dc126039860ab423b97a", "content": "# CVE-2026-105697: CVE-2026-105697: OS Command Injection in Langflow Model Context Protocol Integration\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-10-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-105697\n\n## Summary\nA critical OS command injection vulnerability exists in Langflow's Model Context Protocol (MCP) server integration using stdio transport, allowing unauthenticated remote command execution under default configurations.\n\n## TL;DR\nLangflow versions prior to 1.10.3 allowed unauthenticated remote attackers to execute arbitrary shell commands on the hosting system by exploiting a model context protocol (MCP) server integration wrapper that parsed commands inside a shell context.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78 (Improper Neutralization of Special Elements used in an OS Command)\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity Score**: 9.9 (Critical)\n- **EPSS Score**: 0.00396\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- langflow\n- langflow-base\n- lfx\n- **langflow**: >= 1.1.2, < 1.10.3 (Fixed in: `1.10.3`)\n- **langflow-base**: >= 0.1.2, < 0.10.3 (Fixed in: `0.10.3`)\n- **lfx**: < 1.10.3 (Fixed in: `1.10.3`)\n\n## Mitigation\n\n- Upgrade Langflow, langflow-base, and lfx to secure versions (>= 1.10.3 / >= 0.10.3)\n- Disable the development auto-login feature in production environments\n- Apply strict network firewall policies to restrict public access to port 7860\n\n**Remediation Steps:**\n1. Step 1: Terminate current insecure Langflow container or system processes.\n2. Step 2: Update the requirement files or container images to target version 1.10.3.\n3. Step 3: Modify configuration settings, ensuring the environment variable LANGFLOW_AUTO_LOGIN is explicitly configured to false.\n4. Step 4: Restart the service and verify that the endpoint /api/v1/auto_login no longer issues authorization tokens without authentication.\n\n## References\n\n- [GitHub Security Advisory GHSA-w794-rj3p-xv45](https://github.com/langflow-ai/langflow/security/advisories/GHSA-w794-rj3p-xv45)\n- [NVD Record for CVE-2026-105697](https://nvd.nist.gov/vuln/detail/CVE-2026-105697)\n- [Authoritative CVE Project Entry](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105697.json)\n- [Langflow Release v1.10.3](https://github.com/langflow-ai/langflow/releases/tag/v1.10.3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-105697) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-08T11:30:28.000000Z"} 2026-10-08T11:30:28+00:00 https://vulnerability.circl.lu/sighting/3f831464-e6c5-4be4-93e9-31f7643c2563/export 2026-10-09T02:53:25.599998+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3f831464-e6c5-4be4-93e9-31f7643c2563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105697", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxchebm5kb2r", "content": "CVE-2026-105697 - langflow\nIf an attacker can change the MCP server settings in Langflow, they can make the software execute any operating\u2011system command, such as deleting files or opening a backdoor.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflow #langflowai #CVE #infosec", "creation_timestamp": "2026-10-07T17:20:24.144683Z"} 2026-10-07T17:20:24.144683+00:00 https://vulnerability.circl.lu/sighting/2f781046-4b46-451e-adeb-778df6ad9c09/export 2026-10-09T02:53:25.600135+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2f781046-4b46-451e-adeb-778df6ad9c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105697", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxbewhy3cn27", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 6\n\u2022 Langflow (CVE-2026-105697), CVSS 9.9 (Langflow)\n\u2022 Apache Struts (legacy REST Action Mappers) (CVE-2026-104711), CVSS 9.8 (Apache)\n\u2022 Dell System Update (Serveurs Dell PowerEdge) (CVE-2026-86360), CVSS 9.6 (it-connect.fr)", "creation_timestamp": "2026-10-07T07:04:12.052769Z"} 2026-10-07T07:04:12.052769+00:00 https://vulnerability.circl.lu/sighting/febdfbde-4543-4ec2-8523-07b17b3979b7/export 2026-10-09T02:53:25.600239+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "febdfbde-4543-4ec2-8523-07b17b3979b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-105697", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-disponibili-poc-per-lo-sfruttamento-di-4-vulnerabilita", "content": "", "creation_timestamp": "2026-10-06T02:28:15.000000Z"} 2026-10-06T02:28:15+00:00 https://vulnerability.circl.lu/sighting/3978ea17-9132-4598-9397-d08f88bb4d7b/export 2026-10-09T02:53:25.601400+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3978ea17-9132-4598-9397-d08f88bb4d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105697", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx5wiluby62n", "content": "\ud83d\udea8 CVE-2026-105697 \u2014 CVSS 9.9 CRITICAL\n\nLangflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105697\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T22:07:54.652589Z"} 2026-10-05T22:07:54.652589+00:00 https://vulnerability.circl.lu/sighting/220d2994-a153-4f70-b31c-77811a7b7e36/export 2026-10-09T02:53:25.601521+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "220d2994-a153-4f70-b31c-77811a7b7e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105697", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5uhrf6ia2g", "content": "\ud83d\udd34 CVE-2026-105697 - Critical (9.9)\n\nLangflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105697/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T21:31:40.287242Z"} 2026-10-05T21:31:40.287242+00:00 https://vulnerability.circl.lu/sighting/d08ffb63-bba3-4926-a27a-933ef65e0a79/export 2026-10-09T02:53:25.601630+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "d08ffb63-bba3-4926-a27a-933ef65e0a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-105697", "type": "published-proof-of-concept", "source": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-w794-rj3p-xv45", "content": "", "creation_timestamp": "2026-09-28T17:26:49.000000Z"} 2026-09-28T17:26:49+00:00