Vibe Coding
CVE-2026-9186: spoofing X-Forwarded-For at IBM Langflow writes to your ~/.cursor/mcp.json
Langflow OSS 1.0.0 through 1.11.2 gates MCP configuration installation on a localhost-only check that trusts the X-Forwarded-For header, so a remote authenticated attacker sending `X-Forwarded-For: 127.0.0.1` gets arbitrary writes to IDE config files including ~/.cursor/mcp.json. Writing that file is equivalent to installing a tool server the developer's editor will launch. Treat IDE MCP config paths as executable content and watch them for changes.
Source
↳ Follow the thread