Threat Advisory

Langflow Vulnerabilities Gaps Found in Secret Keys and Host Privileges

Threat: Vulnerability
Targeted Region: Global
Targeted Sector: Technology & IT
Criticality: Critical
[subscribe_to_unlock_form]


EXECUTIVE SUMMARY:

Two vulnerabilities were observed in the popular open-source AI workflow platform Langflow. The first is a high severity path traversal flaw that allowed attackers to read sensitive secret key files and forge JWT authentication tokens due to insufficient filtering of file path parameters. The second is a critical unauthenticated remote code execution (RCE) vulnerability in a public API endpoint that accepts attacker-controlled flow data and executes it using Python exec() with no sandboxing, enabling attackers to run arbitrary code and extract credentials and was actively exploited in the wild of disclosure.[/subscribe_to_unlock_form]


EXECUTIVE SUMMARY:

Two vulnerabilities were observed in the popular open-source AI workflow platform Langflow. The first is a high severity path traversal flaw that allowed attackers to read sensitive secret key files and forge JWT authentication tokens due to insufficient filtering of file path parameters. The second is a critical unauthenticated remote code execution (RCE) vulnerability in a public API endpoint that accepts attacker-controlled flow data and executes it using Python exec() with no sandboxing, enabling attackers to run arbitrary code and extract credentials and was actively exploited in the wild of disclosure.[emaillocker id="1283"]

  • CVE-2026-33497: It is a directory traversal & file read vulnerability in Langflow endpoint that fails to sanitize folder_name and file_name, allowing attackers to read sensitive files such as the secret_key used for JWT authentication. Exploiting this can lead to fabricating authentication tokens and unauthorized access. The vulnerability has a CVSS score of 8.7.
  • CVE‑2026‑33017: It is an unauthenticated RCE in Langflow, where attacker‑supplied flow data containing arbitrary Python code is executed directly without sandboxing or authentication. Successful exploitation allows full server compromise, credential theft, backdoor installation, and further network compromise. The vulnerability has a CVSS score of 9.3.

 

RECOMMENDATION:

We strongly recommend you update Langflow to below version:

 

REFERENCES:

The following reports contain further technical details:

https://thehackernews.com/2026/03/critical-langflow-flaw-cve-2026-33017.html

https://github.com/advisories/GHSA-ph9w-r52h-28p7

[/emaillocker]
crossmenu