nyk(@nykdotdev):an mcp server entry is a command line. langflow before 1.10.3 ran whatever command sat in that config on the host as soon as it tried to connect. the ui could still say the server failed to start. whoever can edit your mcp settings can run code. guard that page like a shell.

nyk

@nykdotdev

exploring intelligence, markets & the systems shaping both · prev founded @builderzdotdev · @rpcedge · member @SuperteamDE |

加入 September 2017

900 正在關注 10K 粉絲

nyk@nykdotdev

2026.10.06 08:48

an mcp server entry is a command line. langflow before 1.10.3 ran whatever command sat in that config on the host as soon as it tried to connect. the ui could still say the server failed to start. whoever can edit your mcp settings can run code. guard that page like a shell.