Week of to
Bottom line
Restrict access to IBM Langflow OSS, which has 29 new flaws, 24 with no listed fix, though none of this week's new flaws is known to be exploited in the wild.
Secure It
- An attacker who reaches SGLang's message decoder can run arbitrary code, because it deserializes payloads without type allowlisting or authentication, with no listed fix.
- Out of the box, any unauthenticated network client can execute arbitrary x64dbg commands on the Model Context Protocol (MCP) server x64dbg-MCP Server.
- vLLM has 11 flaws, including one where a caller supplies large video frame values without a strict work ceiling.
Build It
- The Cloud Security Alliance published a roadmap to its Frontier Ready Journey, following its April 2026 guidance.
- Langflow adds fixes that redact server credentials from management responses and restrict built-in code execution to administrators.
- MLflow now refuses to connect to client-named artifact hosts outside the default artifact root.
Do this week
- Upgrade Langflow to 1.10.3 (24 of its 29 flaws have no listed fix) and keep IBM Langflow OSS off untrusted networks.
- Upgrade Ollama to 0.35.0.
- Restrict network access to SGLang servers.