CVE-2026-51886
- Source
- https://cve.org/CVERecord?id=CVE-2026-51886
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-51886.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-51886
- Aliases
- Published
- 2026-10-01T00:00:00Z
- Modified
- 2026-10-21T02:30:23Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code (remote). The component is: src/backend/base/langflow/api/v1/validate.py:validate-post_validate_code-a-real-authenticated-http-post-to-api-v1. The attack vector is: Attack surface: HTTP or browser-backed service path. A public-facing route accepts raw Python source and forwards it into a server-side compile/exec validation path without any visible entitlement guard. ΒΆΒΆ A weakness has been identified in langflow-ai langflow up to 1.9.3. langflow contains a code injection vulnerability in validate-post_validate_code-a-real-authenticated-http-post-to-api-v1 (src/backend/base/langflow/api/v1/validate.py:13). An authenticated attacker can execute arbitrary Python code on the server by submitting malicious code to the /api/v1/validate/code endpoint, which directly executes user-supplied code without sandboxing or security controls.
- Database specific
{ "cna_assigner": "mitre", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/51xxx/CVE-2026-51886.json" }- References
Affected packages
Git / github.com/langflow-ai/langflow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/langflow-ai/langflow
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "last_affected": "1.9.3" } ], "source": "DESCRIPTION" } ] }