https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T18:02:19.543308+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-7646 CVE-2026-7646 — Langflow is affected by security vulnerabilities in Model Context Protocol features 2026-09-29T18:02:19.544797+00:00

Affected: IBM Langflow OSS

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.