https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:35:42 +0000 https://cve.radiocsirt.org/vuln/cve-2026-48520 <p><strong>Affected:</strong> langflow-ai langflow</p> <p>Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the &#34;Shareable Playground&#34; (or &#34;Public Flows&#34; in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.</p> <p><strong>Affected:</strong> langflow-ai langflow</p> <p>Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the &#34;Shareable Playground&#34; (or &#34;Public Flows&#34; in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-48520 https://cve.radiocsirt.org/vuln/ghsa-rcjh-r59h-gq37 <p><strong>Affected:</strong> PyPI: langflow</p> <p>### Summary The &#34;Shareable Playground&#34; (or &#34;Public Flows&#34; in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used.</p> <p>By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or *S3 path* if supported by the local configuration</p> <p>### Details Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessing a link. Specifically, it enables the route `/api/v1/build_public_tmp` to execute any public flow, given a public flow ID. This request contains a `files` field that can contain a list of files. The files get read in `LCModelComponent._get_chat_result` in a call to `to_lc_message`. A detailed stacktrace: ``` ... File &#34;/Users/ori/Work/research/langchain/langflow/src/backend/base/langflow/api/build.py&#34;, line 466, in build_vertices vertex_build_response: VertexBuildResponse = await _build_vertex(vertex_id, graph, event_manager) File &#34;/Users/ori/Work/research/langchain/langflow/src/backend/base/langflow/api/build.py&#34;, line 324, in _build_vertex vertex_build_result = await graph.build_vertex( File &#34;/Users/ori/Work/research/langchain/langflow/src/lfx/src/lfx/graph/graph/base.py&#34;, line 1563, in build_vertex await vertex.build( File &#34;/Users/ori/Work/research/langchain/lan…</p> <p><strong>Affected:</strong> PyPI: langflow</p> <p>### Summary The &#34;Shareable Playground&#34; (or &#34;Public Flows&#34; in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used.</p> <p>By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or *S3 path* if supported by the local configuration</p> <p>### Details Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessing a link. Specifically, it enables the route `/api/v1/build_public_tmp` to execute any public flow, given a public flow ID. This request contains a `files` field that can contain a list of files. The files get read in `LCModelComponent._get_chat_result` in a call to `to_lc_message`. A detailed stacktrace: ``` ... File &#34;/Users/ori/Work/research/langchain/langflow/src/backend/base/langflow/api/build.py&#34;, line 466, in build_vertices vertex_build_response: VertexBuildResponse = await _build_vertex(vertex_id, graph, event_manager) File &#34;/Users/ori/Work/research/langchain/langflow/src/backend/base/langflow/api/build.py&#34;, line 324, in _build_vertex vertex_build_result = await graph.build_vertex( File &#34;/Users/ori/Work/research/langchain/langflow/src/lfx/src/lfx/graph/graph/base.py&#34;, line 1563, in build_vertex await vertex.build( File &#34;/Users/ori/Work/research/langchain/lan…</p> https://cve.radiocsirt.org/vuln/ghsa-rcjh-r59h-gq37