RC RANDOM CHAOS

mcp

2 posts

Langflow pipes commands into bash
Article

Langflow pipes commands into bash

Langflow CVE-2026-105740 lets any authenticated user run shell commands via MCP stdio config and is under active exploitation. How it works and what to do.

 MCP is an attack surface, not a feature
Article

MCP is an attack surface, not a feature

An engineer argues the Model Context Protocol is obsolete now that capable agents can call HTTP APIs and CLIs directly, and most MCP servers can go.