cyfenced.com →

[ CVE-2026-105741 · Published 5 Oct 2026 ]

Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

CVSS 7.1 EPSS <1%Fix available

[ Why it matters ]Priority signals

  • Public proof-of-concept exploit exists (CISA SSVC)

[ Description ]Official description

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol (MCP) configuration installation endpoint (POST /api/v1/mcp/project/{project_id}/install) allowed authenticated remote attackers to bypass the "local-only" access restriction. By sending a spoofed X-Forwarded-For: 127.0.0.1 header, an attacker could make the server treat the request as originating from localhost, letting them write/overwrite an MCP client configuration file on the server's filesystem. This vulnerability is fixed in 1.10.3.

[ Fixes ]Fixes and patches

  • langflow 1.10.3Fixed version · GitHub Advisories · pip package langflow: upgrade to 1.10.3 or later (affected >= 1.5.0, < 1.10.3)

[ Packages ]Affected open-source packages

[ References ]References