13 matches found
Remote Code Execution (RCE)
Langflow is vulnerable to Remote Code Execution RCE. The vulnerability exists due to insufficient validation in the PythonCodeTool component, which allows attackers to execute arbitrary code remotely...
GHSA-56M6-4MHW-H3G5 langflow has vulnerability in PythonCodeTool component
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
langflow has vulnerability in PythonCodeTool component
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
PYSEC-2024-279
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
PYSEC-2024-279
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
Langflow 安全漏洞
Langflow is a visualization framework for building multi-agent and RAG applications from the Langflow open source. A security vulnerability exists in Langflow version v1.0.12 that stems from remote code execution in the PythonCodeTool component...
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
PT-2024-30179 · Langflow · Langflow
Name of the Vulnerable Software and Affected Versions: langflow version 1.0.12 Description: A remote code execution RCE vulnerability was discovered in langflow via the PythonCodeTool component. This issue allows a malicious JSON file to be imported to run arbitrary code on the target system by...
CVE-2024-42835
CVE-2024-42835 affects langflow v1.0.12 via the PythonCodeTool component, leading to remote code execution due to insufficient input validation/execution handling. Multiple connected sources (Red Hat, Veracode, OSV, GHSA, CVE listings, PT-Security) confirm an RCE risk through PythonCodeTool, with...
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...