Alfredo Oliveira

**Name of the Vulnerable Software and Affected Versions** Langflow versions 1.4.2 and earlier **Description** An unauthenticated remote code execution flaw exists in the custom component editor's code validation logic. The issue occurs because the application fails to properly validate a user-supplied string in the `code` parameter provided to the `/api/v1/validate` endpoint before using it to execute Python code. This allows a remote attacker to execute arbitrary code in the context of root. Real-world exploitation has been observed, with over 360 attempts detected by honeypots. Attackers are using this flaw to perform system reconnaissance and harvest sensitive credentials from environment variables and the filesystem, specifically targeting `OPENAI API*`, `AWS ACCESS*`, `AWS SECRET*`, `LANGFLOW SUPERUSER`, `/root/.cache/langflow/secret key`, `.ssh` directories, and `.bash history` files. **Recommendations** Update Langflow to version 1.11.6. As a temporary workaround, restrict network access to the `/api/v1/validate` endpoint to trusted IP addresses only. Remove unnecessary internet exposure by placing the management interface behind a VPN or access controls. Rotate all potentially exposed credentials, including OpenAI API keys, AWS access keys, and administrative secrets. Audit SSH keys and shell history for unauthorized access.

**Name of the Vulnerable Software and Affected Versions** Langflow (affected versions not specified) **Description** A flaw exists in Langflow related to the handling of Python function components, potentially allowing remote attackers to execute arbitrary code on affected systems. An attacker may be able to introduce custom Python code into a workflow and leverage this to execute code within the application's context. The impact and exploitability depend on the specific product configuration. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Langflow versions prior to 1.3.0 **Description** Remote attackers can execute arbitrary code on affected installations without requiring authentication. The issue stems from the inclusion of a resource from an untrusted control sphere within the handling of the `exec globals` parameter provided to the 'validate' endpoint. This flaw allows an attacker to execute code in the context of root. **Recommendations** Update to version 1.3.0 or later. As a temporary workaround, restrict access to the 'validate' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Wondershare Repairit version 6.5.2 Wondershare Repairit (affected versions not specified) **Description** The software contains an authentication bypass issue stemming from incorrect permission assignments within a storage account token. This allows remote attackers to bypass authentication without needing to log in. The flaw enables attackers to access the system by exploiting the permissions associated with the token. Multiple reports indicate the potential for supply chain risks, including the ability to swap AI models. No estimated number of affected devices or real-world incidents beyond the discovery of the flaw have been reported. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wondershare Repairit (affected versions not specified) **Description** The software contains an authentication bypass due to incorrect permission assignment of SAS tokens. This allows unauthorized access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Riva versions up to and including 2.18.0 **Description** The issue is related to improper access control, which could lead to escalation of privileges, data tampering, denial of service, or information disclosure. A successful exploit of this vulnerability might have significant consequences. The estimated number of potentially affected devices worldwide is not specified. There are reports of real-world incidents where this issue was exploited. **Recommendations** For versions up to and including 2.18.0, update to a newer version that addresses the improper access control issue to prevent potential data tampering and escalation risks. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: NVIDIA Riva (affected versions not specified) Description: The issue is related to improper access control, which could be exploited to cause data tampering or denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.