Unverified50% confidenceFactExact time
Before Langflow version 1.9.0, any authenticated user could execute remote code on the server by adding an MCP server that uses stdio transport, because the user-supplied command was wrapped as `bash -c "exec {command}"` with no validation, no allowlist and no sandbox isolation, and the command executed immediately when the server list was fetched.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/19/2026
First Seen
Valid until: 1/17/2027
Sources
Related Entities
Related Claims
UnverifiedAn MCP server can run in streamable-http mode (similar to a REST API server, bound to 127.0.0.1 and a specified port), or in stdio mode as a local static server.67% similarUnverifiedThe --bare mode has been redefined to only connect to MCP servers specified on the command line, send no system reminders to the model, and start no background tasks; shell commands that reach the timeout are stopped directly rather than moved to the background.67% similarUnverifiedFor coding agents that live in the terminal, the CLI form is more natural than an MCP server, because it loads almost no context at startup and discovers commands on demand via --help.66% similarUnverifiedWhen using a remote MCP server, users do not need any local runtime—they only need to authenticate and log in, no code is invoked locally, making it the strictest security approach.66% similarUnverifiedLangChain-MCP-Adapters is an adapter library for LangChain to call MCP tools, which was recently updated, resulting in changes to the client-side code writing style.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1072351API
curl https://kongchang.com/api/v1/knowledge/claims/1072351MCP
get_claim(id=1072351)