Description
A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. The attack needs to be performed locally. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| langflow-ai | langflow | 1.9.0, 1.9.1, 1.9.2, 1.9.3 | — |
Advisories 1
- WID-SEC-2026-2030 Langflow: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 7, 2026
References
- VDB-372612 | langflow-ai langflow Bundle URL Loader code injection vdb-entry
- VDB-372612 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- CVE-2026-12822 | CVE Analysis and Report third-party-advisory
- Submit #837582 | langflow-ai/langflow - `Langflow bundle URL loading` - `custom component discovery/import path` <=1.9.3 Remote Code Execution / Untrusted Code Loading third-party-advisory
- https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md related