CVE-2026-48520 Details
Description
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public Flows" in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow configuration used. By making a flow public, public execution of the flow is allowed. The execution request can contain a list of files that gets read by Langflow and fed into the LLM. The files path can be any path supported by the storage - it can be either a local file or S3 path if supported by the local configuration This vulnerability is fixed in 1.10.0.
A vulnerability allowing arbitrary file reads has been identified in Langflow versions prior to 1.10.0. This issue arises in the 'Shareable Playground' feature, which enables public execution of workflows. When a flow is made public, execution requests can include a list of files to be read by Langflow and processed by the language model. The file paths can be local or, if supported by the configuration, S3 paths. The vulnerability is exploited by directing the flow to read files from these paths, potentially exposing sensitive information.
Users can upgrade to Langflow version 1.10.0 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/langflow-ai/langflow/security/advisories/GHSA-rcjh-r59h-gq37 | CISA-ADP | ExploitVendor Advisory |
| https://github.com/langflow-ai/langflow/security/advisories/GHSA-rcjh-r59h-gq37 | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| langflow langflow | < 1.10.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 26, 2026 | Initial Analysis | [email protected] |
| Jun 24, 2026 | CVE Modified | CISA-ADP |
| Jun 23, 2026 | New CVE Received | [email protected] |