{
  "id": 9033203,
  "title": "CVE-2026–17633 - Authenticated RCE in Langflow OSS via /api/v1/custom_component",
  "url": "https://urgent.news/2026/09/21/cve-2026-17633-authenticated-rce-in-langflow-oss-via-api-v1-custom",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-21T23:06:07.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/guidance_white/cve-2026-17633-authenticated-rce-in-langflow-oss-via-apiv1customcomponent-5baj"
  },
  "original_language": "en",
  "account": "CVE-2026-17633 is a vulnerability in Langflow OSS versions 1.0.0 to 1.10.3 that allows authenticated users to execute arbitrary code through the /api/v1/custom_component endpoint. This is due to improper control over code generation, classified under CWE-94. The vulnerability stems from the fact that Langflow does not validate the content of user-provided code, instead only checking if the user is allowed to create custom components. The code is then executed using the exec() function, which allows any code placed inside a class body to run when the class is defined. This design flaw enables attackers to inject malicious code, leading to remote code execution (RCE).",
  "summary": "Summary Field Value CVE ID CVE-2026-17633 CVSS 8.5 (HIGH) CWE CWE-94 (Improper Control of Generation of Code) Affected Langflow OSS 1.0.0 – 1.10.3 Preconditions Any authenticated user + LANGFLOW_ALLOW_CUSTOM_COMPONENTS=true Vulnerable endpoint POST /api/v1/custom_component Langflow is an open-source low-code platform for building LLM applications and agent workflows visually. One of its features,…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}