What is GHSA-5wjx-cxqm-p8r4?

GHSA-5wjx-cxqm-p8r4 is a security advisory published by GitHub Security Advisories with Critical severity. IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected...

Which CVE IDs does GHSA-5wjx-cxqm-p8r4 cover?

GHSA-5wjx-cxqm-p8r4 covers the following CVE IDs: CVE-2026-7663. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5wjx-cxqm-p8r4?

GHSA-5wjx-cxqm-p8r4 has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-5wjx-cxqm-p8r4CriticalCVSS 9.1

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected...

Vendor

GitHub Security Advisories

Published

June 30, 2026

Last Modified

June 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-7663 →

📋 Description

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-7663
https://www.ibm.com/support/pages/node/7277570
https://github.com/advisories/GHSA-5wjx-cxqm-p8r4