IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
| Vendor | Product | Versions |
|---|---|---|
| langflow | langflow | 1.0.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| ibm | langflow | cert_advisory | 90% |
Expanded affected versions to include all releases from 1.0.0 through 1.10.0, added CWE-78 for OS command injection, and added relevant tags identifying the specific vulnerability mechanism.
Initial creation
