CVE-2026-48519Disclosure(langflow / langflow)

MEDIUMCVSS 9.6 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch langflow langflow systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulnerability. Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessing a link. Specifically, it enables the route /api/v1/build_public_tmp to execute any public flow, given a public flow ID. When the route executes the flow, it allows for providing arbitrary custom Python code as the nodes code, inside the JSON payload. The vulnerable field is data.nodes[X].data.node.template.code.value. This vulnerability is fixed in 1.9.2.

langflow CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-94

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

langflow

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
8 mentions across 7 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 5 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-06-23); latest day: 1
8 total mentions across 7 days

Affected systems

Vendors

langflow

Products

langflow

Deep dive

Activity timeline8 mentions / 7d

Signal classification3 categories

Disclosure

562.5%

General

225.0%

PoC

112.5%

Referenced assets8 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-04	1	Disclosure1
2026-06-05	1	PoC1
2026-06-15	1	General1
2026-06-16	1	Disclosure1
2026-06-23	2	Disclosure2
2026-07-01	1	Disclosure1
2026-07-17	1	General1

Full discourse8 posts

FOFA@fofabot137d
Disclosure
⚠️⚠️ CVE-2026-48519 (CVSS 9.6): Unauthenticated RCE via Shareable Playground build_public_tmp code injection 🔗FOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJMT0dTUEFDRS1MYW5nRmxvdyI= 🎯30.9K+ Results are found on http://en.fofa.info in the past year. FOFA Query: app="LOGSPACE-LangFlow" 🔖Refer: https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f #OSINT #FOFA #CyberSecurity #Vulnerability
Post summary
The tweet announces CVE‑2026‑48519, highlighting an unauthenticated remote code execution via a code injection in Shareable Playground’s build_public_tmp, but it does not supply a PoC, exploit, patch, or evidence of active exploitation.
07032142.7K
14.2K followersView on X
Ori@vbCrLf126d
General
Over the last few months, I researched Langflow, n8n, and Activepieces. The result is 9 zero-days and a BlueHat IL talk 🛠️ 🚨 CVE-2026-7524 (Critical - 9.8) 🚨 CVE-2026-48519 (Critical - 9.6) ⚠️ CVE-2026-7528 (High - 7.1) 🐛 CVE-2026-42228 (Moderate - 6.3) 🐛 CVE-2026-48520 (Moderate - 6.1) 🚨 CVE-not-yet-published (Critical - 9.0) 🚨 CVE-not-yet-published (Critical - 10.0) ⚠️ CVE-not-yet-published (High - 8.6) ⚠️ CVE-not-yet-published (High - 8.3) Thanks to the vendors for the cooperation and fixes. @Oranav and I will be breaking down some of these on stage at BlueHat IL 2026 Registration closes soon. Write-ups will be published after the con. Abstract: https://www.microsoftrnd.co.il/bluehatil/conference/abstracts#collapse-25 @BlueHatIL @msftsecresponse
Post summary
The post announces the discovery of nine zero-day CVEs across Langflow, n8n, and Activepieces and indicates a planned presentation at BlueHat IL 2026, but provides no technical details or exploit information.
11030468
43 followersView on X
Rubrik Zero Labs@RubrikZeroLabs110d
Disclosure
CVE-2026-48519 (CVSS 9.6 🔴): Langflow's public chatbot endpoint accepted the full application graph—including Python component code—from unauthenticated users. It was a "send me code, I'll run it" endpoint, open to the internet.
Post summary
The text discloses that Langflow’s public chatbot endpoint permits unauthenticated code execution via the application graph, rated CVSS 9.6.
1000061
26 followersView on X
IntegSec@integ_sec94d
General
CVE-2026-48519: Langflow Shareable Playground Remote Code Execution - What It Means for Your Business and How to Respond https://hubs.li/Q04pWk8s0
Post summary
The provided text is a headline announcing CVE-2026-48519, a remote code execution vulnerability in Langflow Shareable Playground, but offers no further detail on PoC, exploitation, patches, or technical specifics.
0000037
32 followersView on X
Infoflowcloud@infoflowcloud118d
Disclosure
🚨*CVE* CVE-2026-48519 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a criti… https://www.cve.org/CVERecord?id=CVE-2026-48519 ----- Traducción: CVE-2026-48519 Lan… http://infoflow.cloud`
Post summary
An announcement of CVE-2026-48519 affecting Langflow’s Shareable Playground prior to version 1.9.2, with a link provided to the official CVE record. No additional details such as a PoC, exploit code, or patch are included.
0000027
88 followersView on X
CVE@CVEnew118d
Disclosure
CVE-2026-48519 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a criti… https://www.cve.org/CVERecord?id=CVE-2026-48519
Post summary
The message announces CVE‑2026‑48519 affecting Langflow’s Shareable Playground before version 1.9.2, but provides no deeper technical or exploit information.
00000664
57.7K followersView on X
Upwind Security MDR@UpwindMDR125d
Disclosure
🚨 CRITICAL - Remote Code Execution in Langflow Public Flows (CVE-2026-48519) Langflow's Shareable Playground/Public Flows feature contains a critical flaw allowing unauthenticated attackers to execute arbitrary Python code on the server. By submitting a crafted JSON payload to the public flow execution endpoint, malicious actors can gain control over affected systems. This poses a severe risk, particularly to deployments with the shareable playgrounds feature enabled, as it could lead to data theft, service disruption, or full system compromise. 👉 Affected: langflow <= 1.9.1 | fix 1.9.2
Post summary
Langflow’s shareable playgrounds allow unauthenticated attackers to execute arbitrary Python code via a crafted JSON payload, resulting in a remote code execution vulnerability (CVE‑2026‑48519). Affected versions up to 1.9.1 are resolved in 1.9.2.
0000068
217 followersView on X
Hephaestvs@Vulcanux_136d
PoC
csirt_it: ‼️ #Langflow: disponibile #PoC per lo sfruttamento della CVE-2026-48519 Rischio: 🔴 Tipologia 🔸 Remote Code Execution 🔗 https://acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-48519 🔄 Aggiornamenti disponibili 🔄 https://t.co/Dnu02g5R7f
Post summary
A publicly available Proof of Concept for the CVE‑2026‑48519 remote code execution vulnerability is disclosed, providing evidence that exploitation code exists.
0000052
615 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	langflow	langflow	-	-	-

Explore more

Back to dashboard langflow CVEs langflow vulnerabilities

What researchers are saying

CVE-2026-48519

FOFA[verified]@fofabotDisclosure

The tweet announces CVE‑2026‑48519, highlighting an unauthenticated remote code execution via a code injection in Shareable Playground’s build_public_tmp, but it does not supply a PoC, exploit, patch, or evidence of active exploitation.

Ori[verified]@vbCrLfGeneral

The post announces the discovery of nine zero-day CVEs across Langflow, n8n, and Activepieces and indicates a planned presentation at BlueHat IL 2026, but provides no technical details or exploit information.

IntegSec[verified]@integ_secGeneral

The provided text is a headline announcing CVE-2026-48519, a remote code execution vulnerability in Langflow Shareable Playground, but offers no further detail on PoC, exploitation, patches, or technical specifics.

Upwind Security MDR[verified]@UpwindMDRDisclosure

Langflow’s shareable playgrounds allow unauthenticated attackers to execute arbitrary Python code via a crafted JSON payload, resulting in a remote code execution vulnerability (CVE‑2026‑48519). Affected versions up to 1.9.1 are resolved in 1.9.2.

Rubrik Zero Labs@RubrikZeroLabsDisclosure

The text discloses that Langflow’s public chatbot endpoint permits unauthenticated code execution via the application graph, rated CVSS 9.6.

Infoflowcloud@infoflowcloudDisclosure

An announcement of CVE-2026-48519 affecting Langflow’s Shareable Playground prior to version 1.9.2, with a link provided to the official CVE record. No additional details such as a PoC, exploit code, or patch are included.

CVE@CVEnewDisclosure

The message announces CVE‑2026‑48519 affecting Langflow’s Shareable Playground before version 1.9.2, but provides no deeper technical or exploit information.

Hephaestvs@Vulcanux_PoC

A publicly available Proof of Concept for the CVE‑2026‑48519 remote code execution vulnerability is disclosed, providing evidence that exploitation code exists.