Summary
Ein Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder beliebigen Code auszuführen, was weitere Angriffe ermöglicht.
Product
Langflow bietet eine visuelle Schnittstelle zum Erstellen von LLM-basierten Anwendungen.
Vulnerabilities 2
-
Critical 9.3
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data paramete…
KEV Mar 25, 2026 -
Medium 6.1
Langflow has Missing Ownership Verification in API Key Deletion (IDOR)
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the delete_api_key_route() endpoint accepts an api_key_id path parameter and deletes it with only a generic authentication check (get_current_active_use…
Revision history
-
#3
CVE-2026-33017 ergänzt, wird ausgenutzt
-
#2
CVE-2026-33053 ergänzt
-
#1
Initiale Fassung
References
-
Langflow-AI GitHub vom 2026-03-16
https://github.com/langflow-ai/langflow/security/advisories/GHSA-rf6x-r45m-xv3w
-
Langflow-AI GitHub vom 2026-03-16
https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx
-
Sysdig Blog vom 2026-03-19
https://www.sysdig.com/blog/cve-2026-33017-how-attackers-compromised-langflow-ai-pipelines-in-20-hours