PT-2026-51264 · Langflow Ai · Langflow
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
langflow-ai langflow versions prior to 1.9.4
Description
An issue exists in the Bundle URL Loader component where manipulation of an unknown function allows for code injection. This attack must be performed locally.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Special Elements Injection
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Langflow