CVE-2026-48519

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulnerability. Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessing a link. Specifically, it enables the route /api/v1/build_public_tmp to execute any public flow, given a public flow ID. When the route executes the flow, it allows for providing arbitrary custom Python code as the nodes code, inside the JSON payload. The vulnerable field is data.nodes[X].data.node.template.code.value. This vulnerability is fixed in 1.9.2.

• CWE-94

• https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26fExploit, Vendor Advisory
• https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26fExploit, Vendor Advisory

Published

Jun 23, 2026

Last Modified

Jun 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48513MessagePack for C# is a MessagePack serializer for C#. Prior…7.5
• CVE-2026-48514MessagePack for C# is a MessagePack serializer for C#. Prior…7.5
• CVE-2026-48515MessagePack for C# is a MessagePack serializer for C#. Prior…7.5
• CVE-2026-48516MessagePack for C# is a MessagePack serializer for C#. Prior…7.5
• CVE-2026-48517MessagePack for C# is a MessagePack serializer for C#. Prior…7.5
• CVE-2026-48518MultiJuicer is used to run separate Juice Shop instances on …4.3
• CVE-2026-4852The Image Source Control Lite – Show Image Credits and Capti…6.4
• CVE-2026-48520Langflow is a tool for building and deploying AI-powered age…6.1
• CVE-2026-48522PyJWT is a JSON Web Token implementation in Python. Prior to…4.2
• CVE-2026-48523PyJWT is a JSON Web Token implementation in Python. From 2.9…5.4
• CVE-2026-48524PyJWT is a JSON Web Token implementation in Python. Prior to…3.7
• CVE-2026-48525PyJWT is a JSON Web Token implementation in Python. From 2.8…5.3