Exploit for Eval Injection in Langflow

CVE-2026-33017 — Langflow Unauthenticated RCE PoC 면책 조항...

Exploit for Eval Injection in Langflow

No d...

PT-2026-71867

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.9.6 Description Improper restriction of excessive authentication attempts could allow a remote attacker to obtain unauthorized access to user accounts. Recommendations Update IBM Langflow OSS to a...

CVE-2026-19297: Improper Restriction of Excessive Authentication Attempts

IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts...

Security Bulletin: Insufficient Authentication Brute Force Protection on Login Endpoint

Summary A rate limiting capability exists within the product to restrict the number of authentication attempts permitted per IP address per minute against the login endpoint POST /api/v1/login. This control is configurable via the LANGFLOWRATELIMITENABLED environment variable, which defaults to...

Security Bulletin: Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

Summary The voice mode subsystem src/backend/base/langflow/api/v1/voicemode.py contains two critical vulnerabilities that enable cross-tenant API key reuse and billing fraud. The first vulnerability involves a process-global ElevenLabs client singleton that caches the first user's API key and...

Langflow Remote Code Execution

Langflow versions prior to 1.9.0 are susceptible to unauthenticated remote code execution through the /api/v1/buildpublictmp/flowid/flow endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. frozenstringliteral: true This module requires...

Langflow auto_login + validate/code Chain Unauthenticated RCE (CVE-2026-9198) (Direct Check)

Binary data langflowautologinvalidatecodercecve20269198.nbin...

Langflow validate/code exec() Remote Code Execution (CVE-2026-0770) (Direct Check)

Binary data langflowvalidatecodercecve20260770.nbin...

Langflow < 1.3.0 Unauthenticated Code Injection RCE (CVE-2025-3248) (Direct Check)

Binary data langflowvalidatecodercecve20253248.nbin...

VulnCheck KEV: CVE-2026-33497

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

langflow-exploit

CVE-2025-3248 - Langflow Code Validation Endpoint RCE A proof...

VulnCheck KEV: CVE-2026-55450

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the...

Langflow 1.x.x < 1.10.1 Code Injection

The version of Langflow installed on the remote host is 1.x.x prior to 1.10.1. It is, therefore, affected by a code injection vulnerability: - IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with...

IBM Langflow OSS weak encryption key derivation vulnerability

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a weak encryption key derivation vulnerability. This vulnerability stems from the ensurefernetkey function not properly handling the key derivation process, resulting in...

IBM Langflow OSS code injection vulnerability

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a code injection vulnerability. This vulnerability arises from improper handling of user input code, resulting in inadequate control over inputs. Attackers can exploit this...

IBM Langflow OSS path traversal vulnerability (CNVD-2026-32376)

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a path traversal vulnerability. This vulnerability arises from failing to properly validate URL-encoded path traversal sequences in file names when handling MCP resources/read...

IBM Langflow OSS Code Execution Vulnerability

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a code execution vulnerability. This vulnerability stems from the use of truncated SHA-256 hashes for code verification by the custom component validation mechanism. The hashi...

IBM Langflow OSS authorization bypass vulnerability

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a vulnerability related to authorization bypass. This vulnerability arises from the fact that the retrievemessages and storemessage methods of MemoryComponent only filter...

IBM Langflow OSS arbitrary directory deletion vulnerability

IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a vulnerability related to arbitrary directory deletion. This vulnerability stems from its failure to properly validate the username field. Attackers can exploit this...