Описание
Langflow remote code execution vulnerability
Langflow allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.
Пакеты
Наименование
langflow
pip
Затронутые версииВерсия исправления
< 1.0.15
1.0.15
Связанные уязвимости
CVSS3: 9.8
nvd
больше 1 года назад
Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.