{"data":{"id":"3fabc75b-6c92-4d26-90e2-da7789f22067","title":"GHSA-vwmf-pq79-vjvx: Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint","summary":"The POST /api/v1/build_public_tmp/{flow_id}/flow endpoint in Langflow builds public flows without authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data instead of the stored flow, and node definitions containing arbitrary Python code reach exec() in prepare_global_scope (src/lfx/src/lfx/custom/validate.py) with no sandboxing. The source states this is distinct from CVE-2025-3248, which added authentication to /api/v1/validate/code. Preconditions are at least one public flow and its UUID; the source notes that with AUTO_LOGIN=true, the default, these can be met by an unauthenticated attacker.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-vwmf-pq79-vjvx","publishedAt":"2026-03-17T20:05:05.000Z","cveId":"CVE-2026-33017","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langflow@<= 1.8.1"],"affectedPackageNames":["langflow"],"affectedPackageRefs":["pypi:langflow"],"affectedVendors":[],"affectedVendorsRaw":["Langflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.96177,"epssCheckedAt":"2026-11-04T06:10:14.105Z","kevDateAdded":"2026-03-25","advisoryAliases":["GHSA-vwmf-pq79-vjvx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-03-17T20:05:05.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":1,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}