CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

PT-2024-27242 · Langflow · Langflow

Name of the Vulnerable Software and Affected Versions: Langflow versions 0.6.19 and earlier Description: The issue allows remote code execution if untrusted users can reach the "POST /api/v1/custom component" endpoint and provide a Python script. Recommendations: For Langflow versions 0.6.19 and...