CVE-2026-19298

IBM Langflow OSS versions 1.0.0 through 1.11.2 contain an authorization policy bypass in the authenticated flow-build endpoint . While the dedicated custom component API correctly enforces the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true control (returning HTTP 403 to non-superusers), the flow-build...

EUVD-2026-71598

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow build process...

cve-2026-33067

CVE-2026-33017 — Plantilla Nuclei para RCE sin autenticación en Langflow Plantilla Nuclei que detecta CVE-2026-33017 — una vulnerabilidad de ejecución remota de código sin autenticación en Langflow ≤ 1.8.2 accesible a través del endpoint público de construcción de flujos: root@kitploit: POST...

CVE-2026-33017-Exploit

CVE-2026-33017 - Langflow 未認証RCE root@kitploit: / \ | | \ ^ / ||||| 認証なしのexec、サンドボックスなし、希望なし。 Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py prepareglobalscope - execcompiledcode - 任意のコードがサーバープロセスとして実行される。ゲームオーバー。 インストール...

CVE-2026-33017-Langflow-RCE

CVE-2026-33017 - Langflow RCE 취약점 xpl0ited by infrar3d 이 개념 증명 익스플로잇은 1.9.0 이전 버전의 Langflow에서 발견된 중요한 원격 코드 실행RCE 취약점을 대상으로 합니다. 이 취약점은 인증되지 않은 공격자가 플로우 빌딩 API 엔드포인트를 통해 악성 Python 코드를 주입하여 임의의 시스템 명령을 실행할 수 있게 합니다. 취약점은 /api/v1/buildpublictmp/flowid/flow 엔드포인트에 존재하며, 이 엔드포인트는 컴포넌트 템플릿의 코드 필드에서 사용...

Security Bulletin: Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint

Summary Langflow contains an authorization policy bypass vulnerability that allows a non-superuser authenticated attacker to execute arbitrary Python code as the Langflow service identity despite the LANGFLOWCUSTOMCOMPONENTADMINONLY=true security control. The dedicated custom component API...

Exploit for Eval Injection in Langflow

CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote...

Exploit for Eval Injection in Langflow

CVE-2026-33017 — Langflow Unauthenticated Remote Code Executio...

CVE-2026-13448

IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint /api/v1/buildpublictmp/flowid/flow . The vulnerability stems from an incomplete denylist in the validatepublicflownocodeexecution function that fails...

EUVD-2026-45308

IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint /api/v1/buildpublictmp/flowid/flow . The vulnerability stems from an incomplete denylist in the validatepublicflownocodeexecution function that fails...

PT-2026-60871

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An unauthenticated remote code execution issue exists in the public flow build endpoint '/api/v1/build public tmp/flow id/flow'. The flaw is caused by an incomplete denylist within the...

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow RCE Vulnerability xpl0ited by infr...

Security Bulletin: Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Summary Langflow provides a visual interface for constructing and executing AI-powered agent workflows, exposing HTTP API endpoints for flow execution, file management, vector store operations, and Model Context Protocol MCP server configuration. An attacker could exploit insufficient validation...

Exploit for Eval Injection in Langflow

Fireflow RCE Exploit Remote Code Execution for Langflow via t...

Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint

SummaryThe POST /api/v1/buildpublictmp/flowid/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data containing arbitrary Python code in node definitions instead of the stored flow...

Exploit for Cross-site Scripting in B3Log Siyuan

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template...

📄 Langflow 1.8.1 Remote Code Execution

This Python script is a multi-threaded tool targeting a suspected vulnerability in Langflow versions 1.8.1 and below that allows unauthenticated remote code execution through unsafe execution of CustomComponent code during flow compilation...

Langflow < 1.9.0 RCE (GHSA-vwmf-pq79-vjvx)

The version of Langflow installed on the remote host is prior to 1.9.0. It is, therefore, affected by a remote code execution vulnerability: - The POST /api/v1/buildpublictmp/flowid/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is...

Unauthenticated Remote Code Execution In Langflow Via Public Flow Build Endpoint

Summary The "POST /api/v1/buildpublictmp/flowid/flow" endpoint allows building public flows without requiring authentication. When the optional "data" parameter is supplied, the endpoint uses attacker-controlled flow data containing arbitrary Python code in node definitions instead of the stored...

CVE-2026-33017 Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/buildpublictmp/flowid/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses...