Paper/Archive/CVE-2026-7663

CVE-2026-7663

IBM Langflow OSS — Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport Authorization Bypass

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 44.1.441 × 208.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.

Affected

ProductAffectedFixed inSource

Langflow OSS1.0.0 – 1.9.6–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ibm (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchibm.com/support/pages/node/7277570