Skip to content
OpenAdvisories
High WID-SEC-2026-3616 3 CVEs

Langflow: Mehrere Schwachstellen

Published Sep 28, 2026 · Updated Oct 5, 2026 · Revision 3 · de-DE

Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um Superuser-Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen sowie Daten offenzulegen oder zu manipulieren.

Product

Langflow bietet eine visuelle Schnittstelle zum Erstellen von LLM-basierten Anwendungen.

Vulnerabilities 3

  • Critical 9.9
    CVE-2026-105697 Public exploit

    Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

    Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and (before 1.10.3) wrapped in bash -c…

    langflow-ai langflow langflow-base lfx PyPI
  • Medium 5.4
    CVE-2026-105698

    Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

    Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/{flow_id}/vertices and POST /api/v1/build/{flow_id}/vertices/{vertex_id} handle…

    langflow-ai langflow langflow-base langflow PyPI
  • Medium 4.1
    CVE-2026-101861

    Langflow Code Execution via eval() in Component Input Schema

    Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious __repr__ method into component input options l…

    langflow-ai langflow

Revision history

  1. #3

    Referenz(en) aufgenommen: CVE-2026-105698, EUVD-2026-92790, CVE-2026-105697, EUVD-2026-92788

  2. #2

    doppelte Eintragung bereinigt

  3. #1

    Initiale Fassung

References