7 matches found
cve-2026-33067
CVE-2026-33017 — Langflow 未认证 RCE Nuclei 模板 用于检测 CVE-2026-33017 的 Nuclei 模板——这是 Langflow ≤ 1.8.2 中存在的一个未认证远程代码执行漏洞，可通过公共 flow 构建端点访问： root@kitploit: POST /api/v1/buildpublictmp/flowid/flow 存在漏洞的处理程序接受攻击者控制的 data 流程（flow）图，并在图构建期间将 data.nodes.data.node.template.code.value 直接传入 Python...
CVE-2026-33017-Exploit
CVE-2026-33017 - Langflow 未认证远程代码执行 root@kitploit: / \ | | \ ^ / ||||| exec 无认证、无沙箱、无希望。 Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py prepareglobalscope - execcompiledcode - 任意代码以服务器进程权限运行。游戏结束。 安装 root@kitploit: git...
CVE-2026-19298
IBM Langflow OSS versions 1.0.0 through 1.11.2 contain an authorization policy bypass in the authenticated flow-build endpoint . While the dedicated custom component API correctly enforces the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true control (returning HTTP 403 to non-superusers), the flow-build...
CVE-2026-19298 Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint
IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow build process...
Security Bulletin: Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint
Summary Langflow contains an authorization policy bypass vulnerability that allows a non-superuser authenticated attacker to execute arbitrary Python code as the Langflow service identity despite the LANGFLOWCUSTOMCOMPONENTADMINONLY=true security control. The dedicated custom component API...
PT-2026-60871
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description An unauthenticated remote code execution issue exists in the public flow build endpoint '/api/v1/build public tmp/flow id/flow'. The flaw is caused by an incomplete denylist within the...
