DeutschShown in its original language — a full translation is planned for a future version.
Langflow: Mehrere Schwachstellen
view advisory published 2026-05-27
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Langflow ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-48519US | — | Exploit | ||
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulner… | ||||
| CVE-2026-7528US | high7.5 | — | ||
IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption. | ||||
| CVE-2026-7524US | — | — | ||
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction. | ||||
02
references
External citations — patches, advisories, analysis.
- EUVD-2026-32494 vom 2026-05-27external
- EUVD-2026-32495 vom 2026-05-27external
- Langflow Releases vom 2026-05-27external
- GitHub Security Advisory GHSA-v5ff-9q35-q26f vom 2026-05-27external
- WID-SEC-W-2026-1713 - CSAF Versionself
- WID-SEC-2026-1713 - Portal Versionself
- IBM Security Bulletin 7273426 vom 2026-05-27external
- IBM Security Bulletin 7273427 vom 2026-05-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan