6 matches found
CVE-2026-19298
IBM Langflow OSS versions 1.0.0 through 1.11.2 contain an authorization policy bypass in the authenticated flow-build endpoint . While the dedicated custom component API correctly enforces the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true control (returning HTTP 403 to non-superusers), the flow-build...
cve-2026-33067
CVE-2026-33017 — Langflow अप्रमाणित RCE Nuclei टेम्पलेट Nuclei टेम्पलेट जो CVE-2026-33017 का पता लगाता है — Langflow ≤ 1.8.2 में एक अप्रमाणित रिमोट-कोड-निष्पादन भेद्यता, जो सार्वजनिक flow-build एंडपॉइंट के माध्यम से पहुंच योग्य है: root@kitploit: POST /api/v1/buildpublictmp/flowid/flow कमजोर हैंड...
CVE-2026-33017-Exploit
CVE-2026-33017 - Exécution de code à distance non authentifiée dans Langflow root@kitploit: / \ | | \ ^ / ||||| exec sans authentification, sans sandbox, sans espoir. Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py...
Security Bulletin: Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint
Summary Langflow contains an authorization policy bypass vulnerability that allows a non-superuser authenticated attacker to execute arbitrary Python code as the Langflow service identity despite the LANGFLOWCUSTOMCOMPONENTADMINONLY=true security control. The dedicated custom component API...
PT-2026-60871
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An unauthenticated remote code execution issue exists in the public flow build endpoint '/api/v1/build public tmp/flow id/flow'. The flaw is caused by an incomplete denylist within the...
