This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis β
Q1What is this vulnerability? (Essence + Consequences)
π¨ **Essence**: Langflow < 1.9.0 has a critical RCE flaw. The `/api/v1/build_public_tmp/{flow_id}/flow` endpoint accepts attacker-controlled flow data and passes it to `exec()`.β¦
π¦ **Affected**: Langflow versions **prior to 1.9.0**. Specifically, the `langflow-ai/langflow` product. If you are running an older version, you are at risk.
Q4What can hackers do? (Privileges/Data)
π» **Attacker Capabilities**: Full Remote Code Execution (RCE). Privileges: Equivalent to the Langflow service user. Data: Can read/write files, exfiltrate data, or pivot to internal networks. No authentication required.
Q5Is exploitation threshold high? (Auth/Config)
β‘ **Exploitation Threshold**: **LOW**. It is **Unauthenticated**. Attackers do not need login credentials. They just need network access to the `/api/v1/build_public_tmp/` endpoint.β¦
π **Public Exploit**: **YES**. A Nuclei template is available on GitHub (projectdiscovery/nuclei-templates). Proof-of-Concept (PoC) involves submitting a manipulated flow JSON containing Python code.β¦
π **Self-Check**: 1. Check your Langflow version (`< 1.9.0`). 2. Scan for the endpoint `/api/v1/build_public_tmp/`. 3. Use the provided Nuclei template to test for RCE. 4. Review logs for unexpected `exec()` calls.
Q8Is it fixed officially? (Patch/Mitigation)
β **Official Fix**: **YES**. Patched in **Langflow 1.9.0**. See GitHub Advisory GHSA-rvqx-wpfh-mfx7 and commit 73b6612. Upgrade immediately to the fixed version.
Q9What if no patch? (Workaround)
π§ **No Patch Workaround**: 1. **Block Access**: Restrict network access to the `/api/v1/build_public_tmp/` endpoint via firewall/WAF. 2. **Disable Endpoint**: If possible, disable public flow building features. 3.β¦
π₯ **Urgency**: **CRITICAL**. Unauthenticated RCE is a top-tier threat. With public PoCs available, automated attacks are imminent. **Priority: Patch Immediately.** Do not wait.