EN

Langflow pipes commands into bash

CVE-2026-105740 lets any authenticated Langflow user run arbitrary commands on the host, and the cause is about as plain as RCE gets: the command fi…

langflowrcemcp
Dev.to
EN

The Embedding Rematch

The Shortlist Decides First ended with a caveat I promised to resolve: the retriever in that experiment was BM25, a lexical matcher, and its catastr…

aimcpapiazure
Dev.to