{
  "id": 16363144,
  "title": "Harden mcp stdio servers",
  "url": "https://urgent.news/2026/10/24/endurecer-servidores-mcp-stdio",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-24T19:50:20.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/aws-builders/endurecer-servidores-mcp-stdio-2d7d"
  },
  "original_language": "es",
  "account": "Langflow, a company, had a vulnerability in their MCP server, which allowed any authenticated user to register a server with a command that would run directly on the system. This vulnerability, known as CVE-2026-105740, had a CVSS score of 9.9 and was patched in version 1.9.0. The bug allowed users to define what command to run, not just how to parse the string, and was caused by the lack of an allowlist of permitted commands and a blocklist of dangerous commands. According to reports, there have been thousands of attempts to exploit this vulnerability since September 19.",
  "summary": "An MCP server using stdio transport is a command line that your agent runs as you. In October 2026 this was no longer abstract: Langflow's CVE-2026-105740 (CVSS 9.9) allowed any logged-in user to register a stdio server whose command went straight to bash -c . This post walks through the bug, the fix that really holds up, and an audit of a development machine…",
  "key_points": [
    "stdio-based MCP server flaw allowed command execution in October 2026",
    "Langflow lacked approved command list and blocked command list",
    "Affected versions 1.8.3, 1.10.3+, patched in 1.9.0"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}