Trend Research

**Name of the Vulnerable Software and Affected Versions** Langflow versions 1.4.2 and earlier **Description** An unauthenticated remote code execution flaw exists in the custom component editor's code validation logic. The application fails to properly validate user-supplied strings provided to the `/api/v1/validate` endpoint via the `code` parameter before using them to execute Python code. This allows remote attackers to execute arbitrary code in the context of root. Real-world exploitation has been observed, with over 360 attempts detected by honeypots. Attackers are using this issue to perform system reconnaissance and harvest sensitive credentials, specifically targeting environment variables such as `OPENAI API*`, `AWS ACCESS*`, `AWS SECRET*`, and `LANGFLOW SUPERUSER`, as well as accessing `/root/.cache/langflow/secret key`, `.ssh` directories, and `.bash history` files. **Recommendations** Update Langflow to version 1.11.6. As a temporary workaround, restrict network access to the `/api/v1/validate` endpoint to trusted IPs only or remove the instance from the internet. Rotate all potentially exposed credentials, including OpenAI API keys, AWS access keys, and administrative secrets. Audit SSH authorized keys and shell history for unauthorized access.