langflow

Langflow pipes commands into bash

Langflow CVE-2026-105740 lets any authenticated user run shell commands via MCP stdio config and is under active exploitation. How it works and what to do.