medium6.1
CVE-2026-48520
Langflow is a tool for building and deploying AI-powered agents and workflows.
Impact
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public Flows" in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | langflow | < 1.10.0 | 1.10.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Langflow | Langflow | before 1.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-rcjh-r59h-gq37
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-rcjh-r59h-gq37
- https://nvd.nist.gov/vuln/detail/CVE-2026-48520
- https://github.com/pypa/advisory-database/tree/main/vulns/langflow/PYSEC-2026-244.yaml