Iniciar sesión
Deutsch English Español Polski
Alta

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with all

  • Publicada: 05.12.2025
  • Actualizado: 11.10.2026 12:20

CISA confirma la explotación de esta vulnerabilidad en ataques reales. Prioriza comprobar si afecta a tu aplicación. CISA KEV · CC0 1.0

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. An attacker-controlled origin can therefore obtain fresh access_token / refresh_token pairs for a victim session. Obtained tokens permit access to authenticated endpoints — including built-in code-execution functionality — allowing the attacker to execute arbitrary code and achieve full system compromise.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Python (PyPI) langflow < 1.7.0 1.7.0

Referencias

Puntuación CVSS 8.8/10
Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Debilidad (CWE)
CWE-346
Plataforma
Python (PyPI)
Paquete
langflow
Publicada
05.12.2025
Actualizado
11.10.2026 12:20

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-577h-p2hh-v4mv - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2025-78 - PyPA Advisory Database; CC BY 4.0

Historial de vulnerabilidades: langflow

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (42) en el archivo
Entradas en total
42
Primera → última
06.2024 10.2026
Sin corrección
7
Explotada en ataques
5

Distribución por gravedad

  • Crítica 15
  • Alta 17
  • Media 7
  • Baja 3

Divulgaciones por año

Gravedad:
  1. Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
    Crítica · 9.9 CVE-2026-105697 >= 1.1.2, < 1.10.3 1.10.3
  2. Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
    Alta CVE-2026-105699 >= 1.6.8, < 1.9.1 1.9.1
  3. Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
    Alta · 7.1 CVE-2026-105741 >= 1.5.0, < 1.10.3 1.10.3
  4. Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation
    Crítica · 9.9 CVE-2026-10561 < 1.10.1 1.10.1
  5. Langflow: Weak Fernet Key via random.seed()
    Crítica · 9.1 CVE-2026-9205 < 1.10.1 1.10.1
  6. Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
    Crítica · 9.8 CVE-2026-8505 >= 1.7.0, < 1.9.1 1.9.1
  7. Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
    Alta · 8.8 CVE-2026-51886 >= 1.7.2, < 1.10.1 1.10.1
  8. Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
    Alta · 8.8 CVE-2026-7700 >= 1.3.0, < 1.10.3 1.10.3
  9. Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
    Crítica · 9.6 CVE-2026-55447 < 1.9.2 1.9.2
  10. Langflow: Unauthenticated DoS through multipart form boundary file upload
    Alta · 7.5 CVE-2026-55446 < 1.0.19 1.0.19
  11. Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
    Alta · 8.4 Explotada en ataques CVE-2026-55255 < 1.9.1 1.9.1
  12. Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
    Crítica · 9.3 CVE-2026-55450 < 1.9.1 1.9.1
  13. Langflow: Unauthenticated RCE in Shareable Playgrounds
    Crítica · 9.6 CVE-2026-48519 < 1.9.2 1.9.2
  14. Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
    Alta · 8.8 CVE-2026-33760 < 1.9.0 1.9.0
  15. Langflow Knowledge Bases API is Vulnerable to Path Traversal
    Crítica · 9.6 CVE-2026-42048 < 1.9.0 1.9.0
  16. Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
    Alta CVE-2026-34046 < 1.5.1 1.5.1
  17. Langflow has Authenticated Code Execution in Agentic Assistant Validation
    Crítica CVE-2026-33873 < 1.9.0 1.9.0
  18. langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
    Alta CVE-2026-33497 < 1.7.1 1.7.1
  19. langflow has Unauthenticated IDOR on Image Downloads
    Alta · 7.5 CVE-2026-33484 >= 1.0.0, < 1.9.0 1.9.0
  20. Langflow has an Arbitrary File Write (RCE) via v2 API
    Crítica · 9.9 CVE-2026-33309 >= 1.2.0, < 1.9.0 1.9.0
  21. Langflow is Missing Ownership Verification in API Key Deletion (IDOR)
    Alta CVE-2026-33053 < 1.9.0 1.9.0
  22. Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
    Crítica · 9.8 Explotada en ataques CVE-2026-33017 < 1.9.0 1.9.0
  23. Langflow has Remote Code Execution in CSV Agent
    Crítica · 9.8 CVE-2026-27966 <= 1.8.0rc2 sin corrección
  24. Langflow affected by Remote Code Execution via validate_code() exec()
    Alta Explotada en ataques CVE-2026-0770 <= 1.7.3 sin corrección
  25. Langflow Missing Authentication on Critical API Endpoints
    Alta CVE-2026-21445 < 1.7.1 1.7.1
  26. Langflow vulnerable to Server-Side Request Forgery
    Alta · 7.7 CVE-2025-68477 < 1.7.1 1.7.1
  27. External Control of File Name or Path in Langflow
    Alta · 7.1 CVE-2025-68478 < 1.7.1 1.7.1
  28. Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with all esta entrada
    Alta · 8.8 Explotada en ataques CVE-2025-34291 < 1.7.0 1.7.0
  29. Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
    Alta · 8.8 CVE-2025-57760 < 1.5.0 1.5.0
  30. Langflow Unauth RCE
    Crítica Explotada en ataques CVE-2025-3248 < 1.3.0 1.3.0
  31. langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.
    Crítica · 9.8 CVE-2024-42835 <= 1.0.12 sin corrección
  32. Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.
    Crítica · 9.8 CVE-2024-37014 < 1.0.0a3 1.0.0a3

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.