CVE-2026-48520

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.0

Description The Shareable Playground feature, also known as Public Flows, allows unauthenticated users to execute workflows via a public link. A flaw in this feature enables arbitrary file reading depending on the flow configuration. Specifically, the endpoint '/api/v1/build public tmp' accepts a files parameter containing a list of file paths. These paths can be local files or S3 paths, which are then read by the to lc message function within LCModelComponent. get chat result and fed into the Large Language Model (LLM) as images. The ability to retrieve the file contents depends on the specific LLM configuration used.

Recommendations Update to version 1.10.0. As a temporary workaround, disable the Shareable Playground feature to prevent unauthenticated users from executing public flows.