CVE-2026-48519

CRITICAL 9.6 PoC AVAILABLE

Published 2026-06-23 · Last modified 2026-06-24

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulnerability. Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessing a link. Specifically, it enables the route /api/v1/build_public_tmp to execute any public flow, given a public flow ID. When the route executes the flow, it allows for providing arbitrary custom Python code as the nodes code, inside the JSON payload. The vulnerable field is data.nodes[X].data.node.template.code.value. This vulnerability is fixed in 1.9.2.

EXPLOIT AVAILABLE

Public exploit or PoC code exists. Modeled probability is still low, but the barrier to attack is reduced — watch closely.

Exploitation likelihood

0.7%chance of exploitation in 30 days · 49th percentile

○ In CISA KEV ● Public exploit / PoC

Impact if exploited

9.6CVSS 3.1 · CRITICAL

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

What an attacker needs

✓Access: Reachable over the network — no local access needed
✓Privileges: No account or privileges required
⚠User interaction: A user must take an action (click / open a file)
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

reference https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f
github-search Search GitHub for public PoC repos

Test against your own equipment

curl -s https://vulnpedia.com/cve/CVE-2026-48519/poc.jsonMachine-readable PoC index for this CVE (for automation).

Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-48519/poc.json

Affected

Vendors Langflow Ai Langflow

Products Langflow

Weakness (CWE)

CWE-94: : Improper Control of Generation of Code ('Code Injection')

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Known Affected Software Configurations

Vendor	Product	Version range
Langflow	Langflow	< 1.9.2

All CVSS metrics

CRITICAL 9.6 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CRITICAL 9.6 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

Exploits & PoC

https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f x_refsource_CONFIRMexploitExploitVendor Advisory

Sources: NVD · CVE.org · EPSS