Langflow versions ≤ 1.8.2 contain a severe security vulnerability that allows unauthenticated attackers to achieve Remote Code Execution (RCE) on the server.

---

📊 Vulnerability Details

---

🧨 Root Cause

The endpoint /api/v1/build_public_tmp/{flow_id}/flow was designed for public flows. However, when attacker-controlled flow data is passed, the application executes arbitrary Python code using exec() without any sandboxing or validation.

This allows any unauthenticated attacker on the internet to gain full control over the server.

---

⚠️ Impact

• Full server compromise
• Arbitrary command execution
• Data theft / leakage
• Malware deployment (crypto miners, ransomware, backdoors)
• Supply chain attacks (since Langflow is widely used for AI agents)

---

🛡️ Mitigation

• Upgrade immediately to Langflow 1.9.0 or newer
• If upgrade is not possible:
  • Do not expose Langflow directly to the internet
  • Disable public flows
  • Use strong network segmentation and reverse proxy with authentication

---

Demo

---

📚 References

• Langflow Security Advisory
• NVD Detail
• CISA Known Exploited Vulnerabilities (KEV)

---

⚠️ Disclaimer

This repository is provided for educational and security research purposes only.
The information and tools here are intended to help system administrators and security researchers understand the vulnerability and protect their systems.

Unauthorized exploitation against systems you do not own is illegal and unethical.

---