CVE-2026–17633 - Authenticated RCE in Langflow OSS via /api/v1/custom_component
Summary Field Value CVE ID CVE-2026-17633 CVSS 8.5 (HIGH) CWE CWE-94 (Improper Control of Generation of Code) Affected Langflow OSS 1.0.0 – 1.10.3 Preconditions Any authenticated user + LANGFLOW_ALLOW_CUSTOM_COMPONENTS=true Vulnerable endpoint POST /api/v1/custom_component Langflow is an open-source low-code platform for building LLM applications and agent workflows visually. One of its features,…
CVE-2026-17633 is a vulnerability in Langflow OSS versions 1.0.0 to 1.10.3 that allows authenticated users to execute arbitrary code through the /api/v1/custom_component endpoint. This is due to improper control over code generation, classified under CWE-94. The vulnerability stems from the fact that Langflow does not validate the content of user-provided code, instead only checking if the user is allowed to create custom components.
The code is then executed using the exec() function, which allows any code placed inside a class body to run when the class is defined. This design flaw enables attackers to inject malicious code, leading to remote code execution (RCE).
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
