CVE

CVE-2026-105697

View on NVD ↗

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Exploitation IoCs 2

IP 146[.]70[.]211[.]112
IP 192[.]255[.]229[.]92

MITRE ATT&CK TTPs 5

T1003
OS Credential Dumping
Credential Access
 T1059.001
PowerShell
Execution
 T1078
Valid Accounts
Defense Evasion
 T1083
File and Directory Discovery
Discovery
 T1204.002
Malicious File
Execution

Source Articles

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
A critical authenticated remote code execution vulnerability, CVE-2026-105740 (CVSS 9.9), in the open-source AI platform Langflow is being actively exploited by threat actors. The flaw allows any authenticated user to execute arbitrary OS commands on the server via maliciously crafted MCP server configurations using the 'stdio' transport, with no input validation or sandboxing. Previdian recorded 1,423 exploit attempts from 27 unique IP addresses since September 19, 2026, with increased activity starting October 11. Attackers are using stolen credentials or weak passwords to authenticate and then deploy payloads to extract environment variables, execute system commands, and attempt lateral movement. Immediate mitigation includes upgrading to a patched version, disabling auto-login, and restricting access to trusted users.
hacker-news Oct 15, 2026