Auto-login plus CVE-2026-105740: the configuration that removes the only barrier in Langflow

Langflow has addressed CVE-2026-105740, a critical flaw with a CVSS score of 9.9 affecting releases before 1.9.0. This vulnerability, alongside CVE-2026-105697, involves user-controlled commands reaching a shell via MCP stdio integration. Previdian observed attackers targeting the login path, specifically testing /api/v1/auto_login. Both defects allowed command injection running with Langflow process privileges. The risk level depends heavily on whether auto-login settings are enabled, potentially leaving exposed instances open to unauthorized access.