{"cve":"CVE-2026-51886","nvd":{"published":"2026-10-01T22:17:03.387","modified":"2026-10-06T01:16:36.093","status":"Awaiting Analysis","description":"langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code (remote). The component is: src/backend/base/langflow/api/v1/validate.py:validate-post_validate_code-a-real-authenticated-http-post-to-api-v1. The attack vector is: Attack surface: HTTP or browser-backed service path. A public-facing route accepts raw Python source and forwards it into a server-side compile/exec validation path without any visible entitlement guard. ¶¶ A weakness has been identified in langflow-ai langflow up to 1.9.3. langflow contains a code injection vulnerability in validate-post_validate_code-a-real-authenticated-http-post-to-api-v1 (src/backend/base/langflow/api/v1/validate.py:13). An authenticated attacker can execute arbitrary Python code on the server by submitting malicious code to the /api/v1/validate/code endpoint, which directly executes user-supplied code without sandboxing or security controls.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-94"],"references":["https://gist.github.com/Ro1ME/c11b1e63e4e8fca6b25275144f25ec2a","https://github.com/langflow-ai/langflow/issues/13336","https://github.com/langflow-ai/langflow/issues/13336"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:57:46.668721662+00:00"},"epss":{"cve":"CVE-2026-51886","score":0.00602,"percentile":0.4849,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-w584-2h2r-2hvf","url":"https://osv.dev/vulnerability/GHSA-w584-2h2r-2hvf","summary":"Langflow: Title Authenticated Remote Code Execution in  validate_code  via Malicious Decorators  Description","modified":"2026-10-15T14:55:56.967259869Z","packages":[{"ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[">=1.7.2 <1.10.1"],"fixed":["1.10.1"]}]},{"id":"PYSEC-2026-4236","url":"https://osv.dev/vulnerability/PYSEC-2026-4236","summary":"Langflow: Title Authenticated Remote Code Execution in  validate_code  via Malicious Decorators  Description","modified":"2026-10-15T14:45:10.929036450Z","packages":[{"ecosystem":"PyPI","name":"langflow","purl":"pkg:pypi/langflow","ranges":[">=1.7.2 <1.10.1"],"fixed":["1.10.1"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}