AI agent vulnerability · Langflow

CVE-2026-6599: Langflow vulnerable to injection

lowCVSS 4.0 2.1 · 3.1 6.3GHSA-v66p-f7x3-4794

A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function getclientip/installmcpconfig of the file src/backend/base/langflow/api/v1/mcpprojects.py of the component Model Context Protocol Configuration API. Performing a manipulation of the argument X-Forwarded-For results in injection. The attack may be initiated remotely. The exploit is now public and may be used.

Published Apr 20, 2026 · Updated Apr 28, 2026

Affected packages

langflow

Ecosystem: PyPI
Affected: <= 1.8.3
Fixed in: No patched version yet
Check: pip show langflow

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function get_client_ip/install_mcp_config of the file src/backend/base/langflow/api/v1/mcp_projects.py of the component Model Context Protocol Configuration API. Performing a manipulation of the argument X-Forwarded-For results in injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Langflow vulnerabilities

All Langflow entries