Descrição
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments.
CVSS 8.8EPSS 0.28600000000000003%Risco 0.9
Ver fonte- Publicação
- 2026-08-05 17:16:44
- Última alteração
- 2026-08-06 19:35:09
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H