CVE-2026-9186 in LangflowИнформация

Сводка

по VulDB • 04.09.2026

IBM Langflow OSS dalle versioni 1.0.0 alla 1.11.2 consente agli attaccanti remoti autenticati di bypassare l'installazione della configurazione MCP limitata al solo localhost spoofando l'intestazione X-Forwarded-For: 127.0.0.1, consentendo scritture arbitrarie nei file di configurazione dell'IDE (~/.cursor/mcp.json, ecc.).

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

Ibm

Резервировать

21.05.2026

Раскрытие

04.09.2026

Модерация

принято

Вход

VDB-398849

EPSS

0.00000

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-9186
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-9186
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-9186/

◂ ПредыдущийОбзорДалее ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!