| Package | Affected versions | Patched versions |
|---|---|---|
| langflow | ≥ 1.0.0, < 1.11.0 | 1.11.0 |
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free