CVE-2026-7663

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-25)

CWEs

CWE-863, CWE-285

Published

2026-06-30

Modified

2026-10-25

Record from

the NVD, synced 2026-10-25

Affected

• langflow:langflow

References

• https://www.ibm.com/support/pages/node/7277570

Check your stackJSON