A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. The attack needs to be performed locally. The vendor was contacted early about this disclosure but did not respond in any way.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md Exploit, Mitigation, Third Party Advisory
- https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md Exploit, Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.9 · langflowNVD modified 2026-10-25 23:10
Affected (CPE criteria) 1
cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*
References 6
- https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md Exploit, Mitigation, Third Party Advisory
- https://vuldb.com/cve/CVE-2026-12822 Third Party Advisory, VDB Entry
- https://vuldb.com/submit/837582 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/372612 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/372612/cti Permissions Required, VDB Entry
- https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md Exploit, Mitigation, Third Party Advisory