Threat · curated 23 Jul 2026
CVE-2026-7755 IBM Langflow MCP Server Configuration input validation
First reported vuldb.com
Coverage timeline
Single-source advisory — first reported, latest, and curated coincide.
Why it matters
CVE-2026-7755 exposes Langflow deployments to unauthenticated remote code execution through MCP server configuration files, directly targeting the agent-tooling layer defenders increasingly rely on for LLM workflows.
CVE-2026-7755 is a critical (CVSS 10.0) input-validation vulnerability in IBM Langflow OSS 1.0.0 through 1.10.0 that could allow unauthenticated remote code execution due to incomplete validation enforcement on MCP server configuration files. The flaw affects the MCP Server Configuration component and can be exploited remotely without authentication; no public exploit is currently available.
Summary
CVE-2026-7755 is an improper input validation vulnerability (CWE-20) in the MCP Server Configuration component of IBM Langflow OSS versions 1.0.0 through 1.10.0. According to the CVE summary, incomplete validation enforcement on MCP server configuration files could allow remote code execution.[0]
VulDB rates the flaw very critical with a CVSS v3.1 score of 10.0, noting the attack can be performed remotely, requires no authentication, and is considered easy to exploit. At the time of reporting there is no publicly available exploit and no known mitigation, and the entry reflects vulnerability disclosure rather than any observed in-the-wild exploitation.[0]
Disclosure timeline
| Date | Event |
|---|---|
| 2026-05-04 | CVE-2026-7755 reserved.[0] |
| 2026-07-17 | Advisory disclosed and VulDB entry created.[0] |
| 2026-07-20 | VulDB entry last updated.[0] |
How it works
The vulnerability arises from incomplete validation enforcement on MCP (Model Context Protocol) server configuration files in IBM Langflow. Because the product does not correctly validate that supplied input has the properties required to process the data safely, an attacker can manipulate the MCP server configuration to achieve remote code execution. VulDB classifies the weakness as CWE-20 (Improper Input Validation) with impact to confidentiality, integrity, and availability.[0]
Affected versions and patch status
| Product | Affected | Patch status |
|---|---|---|
| IBM Langflow OSS (including Langflow Desktop) | Versions 1.0.0 through 1.10.0 | No mitigation known per VulDB; users may consider replacing the affected product.[0] |
Key takeaways
- CVE-2026-7755 is a maximum-severity (CVSS 10.0) improper input validation flaw in IBM Langflow's MCP Server Configuration that could permit unauthenticated remote code execution across versions 1.0.0 through 1.10.0.[0]
- No exploit is publicly available and no mitigation is documented at disclosure; defenders should track the vendor advisory and limit exposure of Langflow deployments.[0]
Defensive actions
- Restrict remote and unauthenticated access to IBM Langflow instances and monitor for updated vendor guidance, since the flaw is remotely exploitable without authentication and no mitigation is currently documented.: VulDB reports the attack can be launched remotely without any authentication and lists no known countermeasures, so limiting exposure reduces risk until a fix is available.[0]