#CVE-2026-105740

Langflow MCP flaw draws 1,400+ exploit attempts — and the first fix, 1.9.0, was incomplete

A honeypot logged over 1,400 attempts to exploit a 9.9-rated Langflow command-injection flaw. The full fix is in 1.10.3; 1.9.0 left the execution path open.