Langflow < 1.9.2 Multiple Vulnerabilities

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(326243);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/10");

  script_cve_id("CVE-2026-48519", "CVE-2026-55447");

  script_name(english:"Langflow < 1.9.2 Multiple Vulnerabilities");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of Langflow installed on the remote host is prior to 1.9.2. It is, therefore,
affected by multiple vulnerabilities:

  - The Shareable Playground feature enables execution of workflows by unauthenticated users.
    When the route /api/v1/build_public_tmp executes a flow, it allows providing arbitrary
    custom Python code as the nodes code inside the JSON payload, resulting in remote code
    execution. (CVE-2026-48519)

  - By controlling files that are digested into the RAG, an attacker can direct components
    based on BaseFileComponent to read any file on the filesystem by absolute path. Affected
    components include Docling, Read File, NVIDIA Retriever Extraction, Video File, and
    Unstructured API. (CVE-2026-55447)

Note that Nessus has not tested for these issues but has instead relied only on the application's
self-reported version number.");
  # https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5c9fdbc4");
  # https://github.com/langflow-ai/langflow/security/advisories/GHSA-ccv6-r384-xp75
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?59dbce02");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Langflow version 1.9.2 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-48519");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/05/27");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/05/01");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/10");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:langflow:langflow");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Artificial Intelligence");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("python_langflow_detect.nasl", "langflow_web_detect.nbin");
  script_require_keys("installed_sw/Langflow");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Langflow', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {
          'fixed_version': '1.9.2'
        }
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);