IBM-Langflow-CVE-2026-48519-poc

IBM Langflow Pre-auth RCE in Shareable Playgrounds . running on version/s -c ""...

CVE-2026-33017: Improper Control of Generation of Code

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/buildpublictmp/flowid/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses...