Langflow Remote Code Execution via MCP Stdio Transport

# Langflow Remote Code Execution via MCP Stdio Transport

https://gcdradar.vercel.app/incidents/langflow-remote-code-execution-via-mcp-stdio-transport · AIR-2026-0241 · closed 2026-10-29

- Lane: Patch now
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-10-05
- AI role: Attack on AI
- Products: Langflow
- CVE ids: CVE-2026-105740
- CVSS: 9.9

## Summary

Langflow contained a vulnerability allowing authenticated users to achieve remote code execution through unvalidated MCP server configuration commands. Honeypot exploitation attempts were actively observed in the wild.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-15: Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts (https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html)
- 2026-10-05: CVE-2026-105740: Langflow is a tool for building and deploying AI-powered agents and workflows. (https://nvd.nist.gov/vuln/detail/CVE-2026-105740)

## Sources

- 2026-10-05 NVD: CVE-2026-105740: Langflow is a tool for building and deploying AI-powered agents and workflows. https://nvd.nist.gov/vuln/detail/CVE-2026-105740
- 2026-10-15 The Hacker News: Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.