CVE-2026-7755

Modified Modified - Updated After Analysis

Remote Code Execution in IBM Langflow OSS

Publication date: 2026-07-17

Last updated on: 2026-07-23

Assigner: IBM Corporation

Description

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-17

Last Modified

2026-07-23

Generated

2026-08-07

AI Q&A

2026-07-17

EPSS Evaluated

2026-08-06

NVD

CVE-2026-7755

EUVD

EUVD-2026-45285

Affected Vendors & Products

Vendor	Product	Version / Range
langflow	langflow	From 1.0.0 (inc) to 1.10.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

CVE-2026-7755 is a validation bypass vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.0. It allows authenticated attackers to upload malicious MCP server configuration files without proper validation. The file upload endpoint accepted specific JSON files without checking for dangerous content, while the structured API enforced validation. This bypass could lead to remote code execution when malicious configurations spawn processes with attacker-controlled environment variables.

Detection Guidance

Check for unauthorized or suspicious MCP server configuration files named _mcp_servers_<user_id>.json in Langflow OSS installations. Review file upload endpoints and process execution logs for unexpected MCP server spawns or environment variables.

Impact Analysis

If you use Langflow OSS versions 1.0.0 to 1.10.0, an authenticated attacker could exploit this to execute arbitrary code on your system. This could allow unauthorized access, data theft, or system compromise. The impact depends on your environment and privileges, but the high CVSS score indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR, HIPAA, or other regulations. Compliance requires protecting sensitive data, and a remote code execution flaw undermines those protections. Organizations must remediate this issue to maintain compliance.

Mitigation Strategies

Upgrade Langflow OSS to version 1.10.1 or later immediately. Remove any untrusted MCP server configuration files and audit file upload endpoints for proper validation enforcement.

Hi! I’m here to help you understand CVE-2026-7755. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70