GHSA-qqw9-2vj9-hx7r
Suggest an improvement- Source
- https://github.com/advisories/GHSA-qqw9-2vj9-hx7r
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-qqw9-2vj9-hx7r/GHSA-qqw9-2vj9-hx7r.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-qqw9-2vj9-hx7r
- Withdrawn
- 2026-10-05T22:30:52Z
- Published
- 2026-10-02T00:31:30Z
- Modified
- 2026-10-05T22:45:04Z
- Summary
- Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
- Details
-
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-w584-2h2r-2hvf. This link is maintained to preserve external references.
Original Description
langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code (remote). The component is: src/backend/base/langflow/api/v1/validate.py:validate-post_validate_code-a-real-authenticated-http-post-to-api-v1. The attack vector is: Attack surface: HTTP or browser-backed service path. A public-facing route accepts raw Python source and forwards it into a server-side compile/exec validation path without any visible entitlement guard. ¶¶ A weakness has been identified in langflow-ai langflow up to 1.9.3. langflow contains a code injection vulnerability in validate-post_validate_code-a-real-authenticated-http-post-to-api-v1 (src/backend/base/langflow/api/v1/validate.py:13). An authenticated attacker can execute arbitrary Python code on the server by submitting malicious code to the /api/v1/validate/code endpoint, which directly executes user-supplied code without sandboxing or security controls.
- Database specific
{ "cwe_ids": [], "github_reviewed": true, "github_reviewed_at": "2026-10-05T22:30:52Z", "nvd_published_at": "2026-10-01T22:17:03Z", "severity": "HIGH" }- References
Affected packages
PyPI / langflow
Package
- Name
- langflow
- View open source insights on deps.dev
- Purl
- pkg:pypi/langflow