CVE-2026-105785

CVE

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

October 6, 2026

Last Seen

October 6, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Public Exploits

Checking GitHub for proof-of-concept code…

Related Articles (1)

CVE-2026-105740 AKAOMA CVE VULNERABILITIES / 3h Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exec {command}" with zero validation, no allowlisting, and no sandboxing. The command executes immediately when the server list is fetched. Additionally, th

cve.akaoma.com·3h ago

Related Entities

Zero-day Exploit CVE-2026-105740 CVE-2026-105784 CVE-2026-105786 CVE-2026-82988 CVE-2026-82989 CWE-78 - OS Command Injection CWE-89 - SQL Injection T1059 - Command and Scripting Interpreter