CVE-2026-48519

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.2

Description The Shareable Playground (also known as Public Flows) feature allows unauthenticated users to execute workflows via a link. A flaw in the '/api/v1/build public tmp' endpoint enables attackers to execute arbitrary Python code on the server by submitting a crafted JSON payload. The issue occurs because the system allows providing custom Python code within the data.nodes[X].data.node.template.code.value variable during flow execution. Over 30,900 potentially affected deployments were identified via FOFA. This can lead to full system compromise, data theft, or service disruption.

Recommendations Update to version 1.9.2. As a temporary workaround, disable the Shareable Playground feature to prevent unauthenticated access to the vulnerable endpoint.