CVE Intelligence
Analysis AI-assisted

CVE-2026-7664: IBM Langflow OSS Improper Authorization in MCP Endpoint

CVE-2026-7664 affects IBM Langflow OSS from 1.0.0 through 1.8.4. According to the record, improper authorization enforcement in the Streamable MCP transport endpoint could let unauthenticated attackers access protected MCP project resources and run MCP operations. NVD assigns a CVSS 3.1 base score of 9.8 (Critical), and the record lists no CISA KEV entry.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-7664 is a vulnerability in IBM Langflow OSS, classified as CWE-287 (Improper Authentication). The record describes improper authorization enforcement in the Streamable MCP transport endpoint. IBM published a vendor advisory, referenced below.

Impact

The record states that unauthenticated attackers could access protected MCP project resources and execute MCP operations. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates network reachability, low complexity, no privileges and no user interaction, with high impact to confidentiality, integrity and availability, as scored by the CNA.

  • Confidentiality: protected MCP project resources may be exposed.
  • Integrity: MCP operations may be executed without authorization.
  • Availability: the vector rates availability impact as high, but the record does not describe the specific effects.

Affected products and versions

The record lists IBM Langflow OSS (product 'Langflow Langflow') from 1.0.0 through 1.8.4, inclusive. No fixed version is listed in the record. Verify the exact affected builds and any remediated release against the IBM advisory.

Exploitation status

The CISA KEV entry is marked as not listed in the record, so this analysis does not report active exploitation. No confirmed exploitation appears in the sources consulted. The EPSS score is not provided in the record.

Remediation and mitigation

  • Check the IBM advisory for the official fixed version and upgrade guidance.
  • Inventory all Langflow OSS instances in the affected range, including development and test environments.
  • Until a fix is applied, limit network exposure of the Streamable MCP endpoint, for example by restricting access to trusted networks and placing it behind access controls.
  • Review whether MCP projects contain sensitive resources that would be exposed by this flaw, and rotate credentials stored in those projects if exposure is suspected.

Detection guidance

  • Review access logs for requests to the Streamable MCP endpoint that lack valid authentication context.
  • Look for unexpected access to MCP project resources or unfamiliar MCP operation activity.
  • Correlate endpoint activity with asset inventory to identify instances in the affected range.

Limitations of the available information

The record does not provide a fixed version, a patch identifier, EPSS data, or SSVC data. It does not describe the exact requests that trigger the flaw, and this analysis does not include them. Details of the affected MCP operations and resource types are unknown beyond the record's description.

Frequently asked questions

Which IBM Langflow OSS versions are affected by CVE-2026-7664?

The record lists IBM Langflow OSS from 1.0.0 through 1.8.4, inclusive. Check the IBM advisory for the exact builds and any fixed release.

Is CVE-2026-7664 known to be actively exploited?

The record shows no CISA KEV listing, and no confirmed exploitation appears in the sources consulted. This is not a guarantee that exploitation does not occur.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.