Executive brief
Langflow vulnerable to remote code execution
Affected products
- PyPI langflow
Junglewise Threat Intelligence
CVE-2024-48061: PYSEC-2026-1523 - Langflow vulnerable to remote code execution
CVE-2024-48061 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: langflow (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2571 - Langflow Missing Authentication on Critical API Endpoints
- PYSEC-2026-1522 - Langflow vulnerable to Server-Side Request Forgery
- PYSEC-2026-1526 - Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
- PYSEC-2026-1521 - Inefficient Regular Expression Complexity in langflow
- PYSEC-2026-376 - Langflow has Remote Code Execution in CSV Agent