Saturday, October 17, 2026 · 2 of 5

1. Langflow's critical MCP command-injection flaw (CVE-2026-105740, CVSS 9.9) is under sustained exploitation, with 1,706 honeypot attempts from 28 IPs since Sept 19, and a patch is available

   Oct 15SecurityOpen Source