CVE-2026-78575

IBM Langflow OSS versions 1.0.0 to 1.11.5 are vulnerable to remote command execution due to inadequate validation of command-line arguments in the MCP stdio server configuration. This flaw allows authenticated attackers to execute arbitrary commands, potentially compromising system integrity and data confidentiality. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.