78 matches found
CVE-2025-3248
CVE-2025-3248 はじめに Langflow 1.3.0 より前のバージョンは、Python の exec 関数を介した /api/v1/validate/code エンドポイントにおける認証なしのコードインジェクションの影響を受けます。このエクスプロイトは、この脆弱性を悪用してリバースシェル接続を確立します。 使い方 設定 git clone https://github.com/wand3rlust/CVE-2025-3248.git cd CVE-2025-3248/ python3 -m venv venv . venv/bin/activate pip install...
CVE-2025-3248
CVE-2025-3248 Langflow 는 주로 AI 에이전트와 워크플로우를 구축하고 배포하는 데 사용되는 로우코드 플랫폼입니다. 챗봇, RAG검색 증강 생성 시스템 등을 포함한 복잡한 AI 애플리케이션을 만들기 위한 시각적 인터페이스를 제공하여 개발 프로세스를 단순화합니다. 1.3.0 이전 버전의 Langflow는 /api/v1/validate/code 엔드포인트에서 코드 주입 취약점에 노출되어 있습니다. 원격의 인증되지 않은 공격자는 조작된 HTTP POST 요청을 보내 임의 코드를 실행할 수 있습니다. 사용 예시:...
cve-2026-33067
CVE-2026-33017 — Langflow 인증 없는 RCE Nuclei 템플릿 CVE-2026-33017 을 탐지하는 Nuclei 템플릿입니다 — Langflow ≤ 1.8.2 에서 공개 flow-build 엔드포인트를 통해 접근 가능한 인증 없는 원격 코드 실행 취약점입니다: POST /api/v1/buildpublictmp/flowid/flow 취약한 핸들러는 공격자가 제어하는 data flow 그래프를 허용하며, 그래프 빌드 중 data.nodes.data.node.template.code.value를 샌드박스 없이...
CVE-2026-96795 Horilla: Authenticated RCE in Horilla List-View Export
Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.exportdata in horillaviews/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes fieldtuple1, interpolates it into dynamicfnstr as Python source, and passes the generated function definition to exec. A...
CVE-2026-82278 BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once
BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...
Langflow AI Custom Component Authenticated RCE
Langflow versions 1.0.0 through 1.11.1 are susceptible to authenticated remote code execution due to improper enforcement of security restrictions of code generation on the /api/v1/customcomponent endpoint. The endpoint accepts attacker controlled code that is then passed to Python's exec functio...
PT-2026-76633
Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.0 Description A sandbox escape exists in the IsolatedPluginExecutor component that exposes Python type objects within restricted exec builtins. This allows attackers to traverse the Python class hierarchy...
PT-2026-60865
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description An issue exists in the code validation API endpoint that allows authenticated users to execute arbitrary system commands with the full privileges of the server process. The endpoint...
CVE-2026-8481: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...
CVE-2026-44888
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile endpoint writes user-supplied numeric config values e.g., SMTPPORT directly into pialert.conf without validation. Since pialert.conf is loaded via Python's exec every 3–5 minutes...
CVE-2026-44888 Unauthenticated RCE via Python Config File Injection in SaveConfigFile() (Interger)
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile endpoint writes user-supplied numeric config values e.g., SMTPPORT directly into pialert.conf without validation. Since pialert.conf is loaded via Python's exec every 3–5 minutes...
CVE-2026-44887: Improper Control of Generation of Code
Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration editor allows arbitrary Python code to be injected into pialert.conf. Since the background scan daemon loads this file via Python's exec, injected code executes as the...
CVE-2026-26216
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...
CVE-2026-26216 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter
Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...
PT-2026-7855
Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.8.0 Description A remote code execution flaw exists in the Docker API deployment. The '/crawl' endpoint accepts a hooks parameter containing Python code that is processed using the exec function. Because the import...
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
A critical remote code execution vulnerability exists in the Crawl4AI Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing attackers to import arbitrary modules an...
Exploit for Missing Authentication for Critical Function in Langflow
CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability Scan...
CVE-2025-63604
A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...
CVE-2025-63603: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
