Langflow vulnerable to remote code execution

严重 9.8CVE-2024-48061 · GHSA-5p5r-57fx-pmfr · PYSEC-2026-1523 · Published 04/11/2024 · updated 17/06/2026

要点

CVE-2024-48061 是影响 langflow, langflow (langflow) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.5%，高于 74.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
langflow PyPI	`≤ 1.0.18`	No fix yet
langflow langflow	`≤ 1.0.18`	No fix yet

Description

langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.

NVD description

langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.

References

nvd.nist.gov/vuln/detail/CVE-2024-48061 · ADVISORY
langflow-ai/langflow · WEB
gist.github.com/AfterSnows/1e58257867002462923fd62dde2b5d61 · WEB
langflow-ai/langflow · PACKAGE
rumbling-slice-eb0.notion.site/There-is-a-Remote-Code-Execution-RCE-vulnerability-in-the-repository-https-github-com-langflow-a-105e3cda9e8c800fac92f1b571bd40d8 · WEB
pypi.org/project/langflow · PACKAGE
GitHub Advisory GHSA-5p5r-57fx-pmfr · ADVISORY

langflow 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

langflow

PyPI

≤ 1.0.18

No fix yet

langflow

≤ 1.0.18

No fix yet

Description

langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.

NVD description

langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox.

langflow 的其他漏洞

查看全部 →