Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 18:47:55 +0000 CVE-2026-7664 — Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSS https://cve.radiocsirt.org/vuln/cve-2026-7664 <p><strong>Affected:</strong> IBM Langflow OSS</p> <p>IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.</p> <p><strong>Affected:</strong> IBM Langflow OSS</p> <p>IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.</p> https://cve.radiocsirt.org/vuln/cve-2026-7664