nyk(@nykdotdev):an mcp server entry is a command line. langflow before 1.10.3 ran whatever command sat in that config on the host as soon as it tried to connect. the ui could still say the server failed to start. whoever can edit your mcp settings can run code. guard that page like a shell.

nyk

@nykdotdev

exploring intelligence, markets & the systems shaping both · prev founded @builderzdotdev · @rpcedge · member @SuperteamDE |

Joined September 2017

900 Following 10K Followers

nyk@nykdotdev

2026.10.06 08:48

an mcp server entry is a command line. langflow before 1.10.3 ran whatever command sat in that config on the host as soon as it tried to connect. the ui could still say the server failed to start. whoever can edit your mcp settings can run code. guard that page like a shell.