SB2026032737 - Multiple vulnerabilities in Langflow

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026032737

SB2026032737 - Multiple vulnerabilities in Langflow

Published: March 27, 2026 Updated: April 27, 2026

Security Bulletin ID SB2026032737
CSH Severity
Critical
Patch available
YES
Number of vulnerabilities 5
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 20% High 20% Medium 60%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 5 vulnerabilities.


1) Code injection (CVE-ID: CVE-2026-33017)

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red


The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation at the "/api/v1/build_public_tmp/{flow_id}/flow" endpoint. A remote attacker can send a specially crafted HTTP POST request to the application and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


2) Authorization bypass through user-controlled key (CVE-ID: CVE-2026-33484)

CWE-ID: CWE-639 - Authorization Bypass Through User-Controlled Key

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to missing authorization in the /api/v1/files/images/{flow_id}/{file_name} endpoint when handling image download requests. A remote attacker can send a crafted request with a known or guessed flow_id and file_name to disclose sensitive information.

In multi-tenant deployments, the issue can expose images uploaded by other users.


3) OS Command Injection (CVE-ID: CVE-2026-33475)

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to execute arbitrary shell commands.

The vulnerability exists due to improper neutralization of special elements used in an os command in GitHub Actions workflows and composite actions when interpolating user-controlled GitHub context variables into run steps. A remote attacker can supply a malicious branch name, pull request title, or workflow input to execute arbitrary shell commands.

This issue can be triggered during CI/CD execution in public forks with GitHub Actions enabled.


4) Eval Injection (CVE-ID: CVE-2026-33873)

CWE-ID: CWE-95 - Eval Injection

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote user to execute arbitrary code on the server.

The vulnerability exists due to improper neutralization of directives in dynamically evaluated code in the Agentic Assistant validation path when processing LLM-generated component code. A remote user can cause the model to return malicious component code to execute arbitrary code on the server.

The issue is reachable through the /assist and /assist/stream endpoints, and the streaming path reaches the sink only when the request is classified into the component-generation branch.


5) Path traversal (CVE-ID: CVE-2026-42048)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote user to delete arbitrary directories on the server, leading to data loss and service disruption.

The vulnerability exists due to path traversal in the delete_knowledge_bases_bulk function when handling bulk delete requests to the Knowledge Bases API. A remote user can supply crafted knowledge base names containing traversal sequences to delete arbitrary directories on the server, leading to data loss and service disruption.

The issue affects the DELETE /api/v1/knowledge_bases endpoint and can impact directories outside the intended user directory, including another tenant's knowledge base space.


Remediation

Install update from vendor's website.

References