CVE-2026-105741: Langflow IP Spoofing Bypass Vulnerability Allowing Remote Configuration Write
Summary
CVE-2026-105741: Langflow: IP Spoofing Bypass via X-Forwarded-For Allowing Remote Configuration Write. Affects langflow versions >= 1.5.0, < 1.10.3. Fixed in 1.10.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Langflow is an open-source framework designed for building and managing machine learning workflows. It provides a user-friendly interface for developers to integrate various machine learning models and tools. However, a critical vulnerability has been identified that allows authenticated remote attackers to bypass local-only access restrictions, potentially compromising the integrity of configuration files.
Vulnerability Detail
The vulnerability arises from an IP spoofing issue in the Model Context Protocol (MCP) configuration installation endpoint. Specifically, the get_client_ip function incorrectly trusts the X-Forwarded-For header without verifying if the request passed through a trusted proxy. This allows attackers to send a spoofed header indicating the request is from localhost, enabling them to write or overwrite MCP client configuration files on the server. The impact includes unauthorized modification of configuration files, which could lead to the injection of malicious server definitions or disruption of existing configurations.
How To Fix
Latest published version: 1.14.0.dev2 as of 22 Oct 2026
pip install --upgrade "langflow==1.14.0.dev2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.10.3
This is the first release that contains the fix.
pip install --upgrade "langflow==1.10.3"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, ensure that your deployment does not trust the X-Forwarded-For header by keeping the rate_limit_trust_proxy setting to False, which is the default configuration.
Conclusion
The CVE-2026-105741 vulnerability in Langflow poses a significant risk by allowing remote attackers to bypass local-only access restrictions. It is crucial for users to update to the patched version to mitigate this risk and ensure the integrity of their configurations.
See every vulnerability recorded for langflow →
FAQ
CVE-2026-105741 is a vulnerability in the Langflow package that allows authenticated remote attackers to bypass local-only access restrictions through IP spoofing.
This vulnerability can lead to unauthorized modifications of critical configuration files, potentially allowing attackers to inject malicious server definitions or disrupt existing configurations.
Versions of Langflow from 1.5.0 to 1.10.2 are affected. The vulnerability has been fixed in version 1.10.3 and later.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for langflow.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
