https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:42:34 +0000 https://cve.radiocsirt.org/vuln/cve-2026-48520 <p><strong>Affected:</strong> langflow-ai langflow</p> <p>Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the &#34;Shareable Playground&#34; (or &#34;Public Flows&#34; in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.</p> <p><strong>Affected:</strong> langflow-ai langflow</p> <p>Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the &#34;Shareable Playground&#34; (or &#34;Public Flows&#34; in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-48520