Langflow: Multiple Code Execution Vulnerabilities

Langflow versions up to 1.10.2 contain three critical vulnerabilities: prompt injection in Smart Transform leading to code execution, authenticated RCE via malicious decorators in the validate_code endpoint, and unauthenticated flow execution due to webhook authentication bypass.

Disclosed 5 October 2026 · Record updated 5 October 2026

Impact

Remote code execution with process privileges, potential data exposure, credential theft, and unauthorized flow execution affecting single and multi-tenant deployments

Our coverage

A fortress of interlocking gears suddenly sprouts three gaping holes, allowing shadowy hands to reach through and rewire the machine's inner workings at will.

Vulnerabilities

Three critical flaws let attackers run code on Langflow servers

Advisories published on 5 October 2026 cover a prompt injection path to code execution, an authenticated remote code execution bug and a webhook authentication bypass.

5 Oct 2026

Sources

github.comhttps://github.com/advisories/GHSA-9fpm-3445-2vx4
github.comhttps://github.com/advisories/GHSA-w584-2h2r-2hvf
github.comhttps://github.com/advisories/GHSA-cf6m-vc3m-7cgm