nyk(@nykdotdev):an mcp server entry is a command line. langflow before 1.10.3 ran whatever command sat in that config on the host as soon as it tried to connect. the ui could still say the server failed to start. whoever can edit your mcp settings can run code. guard that page like a shell.

nyk

@nykdotdev

exploring intelligence, markets & the systems shaping both · prev founded @builderzdotdev · @rpcedge · member @SuperteamDE |

参加 September 2017

900 フォロー中 10K ファン

nyk@nykdotdev

2026.10.06 08:48

an mcp server entry is a command line. langflow before 1.10.3 ran whatever command sat in that config on the host as soon as it tried to connect. the ui could still say the server failed to start. whoever can edit your mcp settings can run code. guard that page like a shell.