Langflow OSS Security Update Advisory
Overview A security update has been released to address several vulnerabilities found in Langflow OSS. Affected Versions range from Langflow OSS 1.0.0 Through 1.10.3. Identified Vulnerabilities CVE-2026-7646: Arbitrary file read vulnerability. CVE-2026-8446: Authentication bypass vulnerability. CVE-2026-9077: Bypass of the “localhost-only” restriction and arbitrary MCP server configuration creation vulnerability. CVE-2026-17623: Arbitrary
