What is GHSA-4pf4-j777-cgmf?

GHSA-4pf4-j777-cgmf is a security advisory published by GitHub Security Advisories with Critical severity. IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected...

Which CVE IDs does GHSA-4pf4-j777-cgmf cover?

GHSA-4pf4-j777-cgmf covers the following CVE IDs: CVE-2026-7664. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4pf4-j777-cgmf?

GHSA-4pf4-j777-cgmf has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-4pf4-j777-cgmfCriticalCVSS 9.8

IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected...

Vendor

GitHub Security Advisories

Published

June 22, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-7664 →

📋 Description

IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-7664
https://www.ibm.com/support/pages/node/7277243
https://github.com/advisories/GHSA-4pf4-j777-cgmf