# CVE-2026-48519: Langflow RCE in Shareable Playground via Public Flows API

Source: https://junglewise.ai/threats/cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-23. Updated: 2026-06-23  
License: CC BY 4.0 with a link back

CVE-2026-48519 · Severity: critical · CVSS 9.6 · Published 2026-06-23

Langflow, a tool for building AI workflows, contains a critical security flaw in its 'Shareable Playground' feature. This feature is intended to let users share AI agents via a public link, but it inadvertently allows anyone with that link to run unauthorized commands on the server. An attacker could use this to take full control of the system, potentially stealing sensitive data or disrupting AI operations.

Technologies: [Langflow](https://junglewise.ai/threats/technologies/langflow), [langflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-langflow). Vendors: [Langflow](https://junglewise.ai/threats/vendors/langflow), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-48519 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-48519 being exploited in the wild.

**How severe is CVE-2026-48519?** Critical severity, with a CVSS score of 9.6, published 23 June 2026.

**Which products and versions are affected?** Langflow <= 1.9.1; langflow (PyPI) ECOSYSTEM:introduced=0,fixed=1.9.2.

**Is there a fix for CVE-2026-48519?** Yes. langflow (PyPI): upgrade to 1.9.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-48519 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-48519?** Check whether you run Langflow or langflow (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- langflow (PyPI): upgrade to 1.9.2 or later

  ```sh
  pip install "langflow>=1.9.2"
  ```


## Technical details

A remote code execution (RCE) vulnerability exists in Langflow's 'Shareable Playground' (Public Flows) feature due to improper input validation of workflow payloads. The application exposes the `/api/v1/build_public_tmp` endpoint, which is designed to execute public flows for unauthenticated users. An attacker can provide a crafted JSON payload containing arbitrary Python code within the `data.nodes[X].data.node.template.code.value` field. When the server processes this request to build the graph and instantiate components, it executes the supplied Python code. This vulnerability is tracked as CVE-2026-48519 and is resolved in version 1.9.2.

## Affected products

- langflow-ai Langflow < 1.9.2

## Identifiers

- CVE-2026-48519
- GHSA-v5ff-9q35-q26f
- PYSEC-2026-243

## Timeline

- 2026-05-27: advisory: Initial GitHub security advisory published
- 2026-06-23: disclosed: NVD publication date

## References

- [https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f](https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f)

## Related threats

- [Langflow SSRF in URL-taking components](https://junglewise.ai/threats/langflow-ssrf-in-url-taking-components-protection-disabled-by-default-db7cac37)
- [Langflow IP spoofing in MCP configuration installation](https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)
- [Langflow path traversal and cross-user disclosure in MCP resources](https://junglewise.ai/threats/cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)
- [Langflow authorization bypass in flow API endpoints](https://junglewise.ai/threats/cve-2026-105698-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)
- [Langflow MCP stdio command injection](https://junglewise.ai/threats/cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents)