Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
239 results · page 5 of 5
Apr 30, 2026IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a CVE-2026-4503 · Other software · IBM · reported by psirt@us.ibm.comHigh 7.5
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.
- Product
- Langflow Desktop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system.CVE-2026-4502 · Other software · IBM · reported by psirt@us.ibm.comMedium 6.5
IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
- Product
- Langflow Desktop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting.CVE-2026-3346 · Other software · IBM · reported by psirt@us.ibm.comMedium 6.4
IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
- Product
- Langflow Desktop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 30, 2026IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF).CVE-2026-3340 · Other software · IBM · reported by psirt@us.ibm.comMedium 6.5
IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
- Product
- Langflow Desktop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 20, 2026A flaw has been found in langflow-ai langflow up to 1.8.3.CVE-2026-6600 · Other software · langflow-ai · reported by VulDBLow 2
A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unknown function of the file src/frontend/src/modals/IOModal/components/chatView/chatMessage/components/edit-message.tsx of the component Frontend React Component Rendering. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comvuldb.com
Apr 20, 2026A vulnerability was detected in langflow-ai langflow up to 1.8.3.CVE-2026-6599 · Other software · langflow-ai · reported by VulDBLow 2.1
A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function get_client_ip/install_mcp_config of the file src/backend/base/langflow/api/v1/mcp_projects.py of the component Model Context Protocol Configuration API. Performing a manipulation of the argument X-Forwarded-For results in injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comvuldb.com
Apr 20, 2026A security vulnerability has been detected in langflow-ai langflow up to 1.8.3.CVE-2026-6598 · Other software · langflow-ai · reported by VulDBLow 2.1
A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/base/Langflow/api/v1/projects.py of the component Project Creation Endpoint. Such manipulation of the argument auth_settings leads to cleartext storage in a file or on disk. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comvuldb.com
Apr 19, 2026A weakness has been identified in langflow-ai langflow up to 1.8.3.CVE-2026-6597 · Other software · langflow-ai · reported by VulDBLow 2
A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function remove_api_keys/has_api_terms of the file src/backend/base/langflow/api/utils/core.py of the component Flow Using API. This manipulation causes unprotected storage of credentials. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comvuldb.com
Apr 19, 2026A security flaw has been discovered in langflow-ai langflow up to 1.1.0.CVE-2026-6596 · Other software · langflow-ai · reported by VulDBMedium 5.5
A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This issue affects the function create_upload_file of the file src/backend/base/Langflow/api/v1/endpoints.py of the component API Endpoint. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comvuldb.com
Apr 7, 2026IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default settiCVE-2026-3357 · Other software · IBM · reported by psirt@us.ibm.comHigh 8.8
IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of untrusted data in the FAISS component.
- Product
- Langflow Desktop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-34046 · Other software · langflow-ai · reported by GitHubHigh 8.7
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5.1, the `_read_flow` helper in `src/backend/base/langflow/api/v1/flows.py` branched on the `AUTO_LOGIN` setting to decide whether to filter by `user_id`. When `AUTO_LOGIN` was `False` (i.e., authentication was enabled), neither branch enforced an ownership check — the query returned any flow matching the given UUID regardless of who owned it. This allowed any authenticated user to read any other user's flow, including embedded plaintext API keys; modify the logic of another user's AI agents, and/or delete flows belonging to other users. The vulnerability was introduced by the conditional logic that was meant to accommodate public/example flows (those with `user_id = NULL`) under auto-login mode, but inadvertently left the authenticated path without an ownership filter. The fix in version 1.5.1 removes the `AUTO_LOGIN` conditional entirely and unconditionally scopes the query to the requesting user.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-33873 · Other software · langflow-ai · reported by GitHubCritical 9.3
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature in Langflow executes LLM-generated Python code during its validation phase. Although this phase appears intended to validate generated component code, the implementation reaches dynamic execution sinks and instantiates the generated class server-side. In deployments where an attacker can access the Agentic Assistant feature and influence the model output, this can result in arbitrary server-side Python execution. Version 1.9.0 fixes the issue.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locaCVE-2026-5027 · Other software · langflow-ai · reported by vulnreport@tenable.comHigh 8.8
The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../').
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content.CVE-2026-5026 · Other software · langflow-ai · reported by vulnreport@tenable.comHigh 7
The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content. Since SVG files can contain embedded JavaScript, an attacker can upload a malicious SVG that executes arbitrary JavaScript when viewed by other users, leading to stored cross-site scripting (XSS). This allows stealing authentication tokens stored in cookies, including JWT access and refresh tokens.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer.CVE-2026-5025 · Other software · langflow-ai · reported by vulnreport@tenable.comMedium 6.5
The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication ('get_current_active_user') without any privilege checks (e.g., 'is_superuser').
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2026The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to downCVE-2026-5022 · Other software · langflow-ai · reported by vulnreport@tenable.comMedium 6.3
The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download images belonging to any flow by knowing (or guessing) the flow ID and file name.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-33497 · Other software · langflow-ai · reported by GitHubHigh 8.7
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the download_profile_picture function of the /profile_pictures/{folder_name}/{file_name} endpoint, the folder_name and file_name parameters are not strictly filtered, which allows the secret_key to be read across directories. Version 1.7.1 contains a patch.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-33484 · Other software · langflow-ai · reported by GitHubHigh 7.5
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the `/api/v1/files/images/{flow_id}/{file_name}` endpoint serves image files without any authentication or ownership check. Any unauthenticated request with a known flow_id and file_name returns the image with HTTP 200. In a multi-tenant deployment, any attacker who can discover or guess a `flow_id` (UUIDs can be leaked through other API responses) can download any user's uploaded images without credentials. Version 1.9.0 contains a patch.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-33475 · Other software · langflow-ai · reported by GitHubCritical 9.1
Langflow is a tool for building and deploying AI-powered agents and workflows. An unauthenticated remote shell injection vulnerability exists in multiple GitHub Actions workflows in the Langflow repository prior to version 1.9.0. Unsanitized interpolation of GitHub context variables (e.g., `${{ github.head_ref }}`) in `run:` steps allows attackers to inject and execute arbitrary shell commands via a malicious branch name or pull request title. This can lead to secret exfiltration (e.g., `GITHUB_TOKEN`), infrastructure manipulation, or supply chain compromise during CI/CD execution. Version 1.9.0 patches the vulnerability. --- ### Details Several workflows in `.github/workflows/` and `.github/actions/` reference GitHub context variables directly in `run:` shell commands, such as: ```yaml run: | validate_branch_name "${{ github.event.pull_request.head.ref }}" ``` Or: ```yaml run: npx playwright install ${{ inputs.browsers }} --with-deps ``` Since `github.head_ref`, `github.event.pull_request.title`, and custom `inputs.*` may contain **user-controlled values**, they must be treated as **untrusted input**. Direct interpolation without proper quoting or sanitization leads to sh
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-33309 · Other software · langflow-ai · reported by GitHubCritical 9.9
Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 (External Control of File Name), leading to the root architectural issue within `LocalStorageService` remaining unresolved. Because the underlying storage layer lacks boundary containment checks, the system relies entirely on the HTTP-layer `ValidatedFileName` dependency. This defense-in-depth failure leaves the `POST /api/v2/files/` endpoint vulnerable to Arbitrary File Write. The multipart upload filename bypasses the path-parameter guard, allowing authenticated attackers to write files anywhere on the host system, leading to Remote Code Execution (RCE). Version 1.9.0 contains an updated fix.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 20, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-33053 · Other software · langflow-ai · reported by GitHubMedium 6.1
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the delete_api_key_route() endpoint accepts an api_key_id path parameter and deletes it with only a generic authentication check (get_current_active_user dependency). However, the delete_api_key() CRUD function does NOT verify that the API key belongs to the current user before deletion.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 20, 2026Langflow Code Injection VulnerabilityCVE-2026-33017 · Other software · Langflow · reported by GitHubExploitedCritical 9.3
Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.
- Product
- Langflow
- On CISA’s list since
- Mar 25, 2026 (federal fix deadline Apr 8, 2026)
- What to do
- Attackers are using this now. Install Langflow’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA cataloggithub.comgithub.com
Feb 25, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-27966 · Other software · langflow-ai · reported by GitHubCritical 9.8
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.8.0, the CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which automatically exposes LangChain’s Python REPL tool (`python_repl_ast`). As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE). Version 1.8.0 fixes the issue.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 22, 2026Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability.CVE-2026-0772 · Other software · Langflow · reported by zdi-disclosures@trendmicro.comHigh 7.5
Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk cache service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27919.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 22, 2026Langflow PythonFunction Code Injection Remote Code Execution Vulnerability.CVE-2026-0771 · Other software · Langflow · reported by zdi-disclosures@trendmicro.comHigh 7.1
Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The specific flaw exists within the handling of Python function components. Depending upon product configuration, an attacker may be able to introduce custom Python code into a workflow. An attacker can leverage this vulnerability to execute code in the context of the application. Was ZDI-CAN-27497.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 22, 2026Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityCVE-2026-0770 · Other software · Langflow · reported by zdi-disclosures@trendmicro.comExploitedCritical 9.8
Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations.
- Product
- Langflow
- On CISA’s list since
- Jul 21, 2026 (federal fix deadline Jul 24, 2026)
- What to do
- Attackers are using this now. Install Langflow’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogzerodayinitiative.comcisa.gov
Jan 22, 2026Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability.CVE-2026-0769 · Other software · Langflow · reported by zdi-disclosures@trendmicro.comCritical 9.8
Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of eval_custom_component_code function. The issue results from the lack of proper validation of a user-supplied string before using it to execute python code. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26972.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 22, 2026Langflow code Code Injection Remote Code Execution Vulnerability.CVE-2026-0768 · Other software · Langflow · reported by zdi-disclosures@trendmicro.comCritical 9.8
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code parameter provided to the validate endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-27322.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 2, 2026Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2026-21445 · Other software · langflow-ai · reported by GitHubHigh 8.8
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. Version 1.7.0.dev45 contains a patch.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 19, 2025Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2025-68478 · Other software · langflow-ai · reported by GitHubHigh 7.1
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed directory enforcement, so absolute paths (e.g., /etc/poc.txt) are interpreted as is. Version 1.7.0 fixes the issue.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 19, 2025Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2025-68477 · Other software · langflow-ai · reported by GitHubHigh 7.7
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, Langflow provides an API Request component that can issue arbitrary HTTP requests within a flow. This component takes a user-supplied URL, performs only normalization and basic format checks, and then sends the request using a server-side httpx client. It does not block private IP ranges (127[.]0[.]0[.]1, the 10/172/192 ranges) or cloud metadata endpoints (169[.]254[.]169[.]254), and it returns the response body as the result. Because the flow execution endpoints (/api/v1/run, /api/v1/run/advanced) can be invoked with just an API key, if an attacker can control the API Request URL in a flow, non-blind SSRF is possible—accessing internal resources from the server’s network context. This enables requests to, and collection of responses from, internal administrative endpoints, metadata services, and internal databases/services, leading to information disclosure and providing a foothold for further attacks. Version 1.7.0 contains a patch for this issue.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2025Langflow Origin Validation Error VulnerabilityCVE-2025-34291 · Other software · Langflow · reported by VulnCheckExploitedCritical 9.4
Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. This could allow the attacker to execute arbitrary code and achieve full system compromise via obtained tokens that permit access to authenticated endpoints.
- Product
- Langflow
- On CISA’s list since
- May 21, 2026 (federal fix deadline Jun 4, 2026)
- What to do
- Attackers are using this now. Install Langflow’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA cataloggithub.comobsidiansecurity.com
Aug 25, 2025Langflow is a tool for building and deploying AI-powered agents and workflows.CVE-2025-57760 · Other software · langflow-ai · reported by GitHubHigh 8.8
Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers where an authenticated user with RCE access can invoke the internal CLI command langflow superuser to create a new administrative user. This results in full superuser access, even if the user initially registered through the UI as a regular (non-admin) account. A patched version has not been made public at this time.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 7, 2025Langflow Missing Authentication VulnerabilityCVE-2025-3248 · Other software · Langflow · reported by VulnCheckExploitedRansomwareCritical 9.8
Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.
- Product
- Langflow
- On CISA’s list since
- May 5, 2025 (federal fix deadline May 26, 2025)
- What to do
- Attackers are using this now. Install Langflow’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA cataloggithub.comgithub.com
Nov 4, 2024langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rathCVE-2024-48061 · Other software · Langflow · reported by MITRECritical 9.8
langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comrumbling-slice-eb0.notion.site
Oct 31, 2024langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.CVE-2024-42835 · Other software · Langflow · reported by MITRECritical 9.8
langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2024A vulnerability classified as problematic was found in Langflow up to 1.0.18.CVE-2024-9277 · Other software · langflow · reported by VulDBMedium 5.1
A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remaining_text leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrumbling-slice-eb0.notion.sitevuldb.com
Jul 30, 2024Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain super admin privilegesCVE-2024-7297 · Other software · Langflow · reported by vulnreport@tenable.comHigh 8.8
Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain super admin privileges by performing a mass assignment request on the '/api/v1/users' endpoint.
- Product
- Langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtenable.comtenable.com
Jun 10, 2024Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python scriCVE-2024-37014 · Other software · langflow · reported by MITRECritical 9.8
Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.
- Product
- langflow
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.