GHSA-qqw9-2vj9-hx7r: Code Injection
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-w584-2h2r-2hvf. This link is maintained to preserve external references.
Original Description langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code (remote). The component is: src/backend/base/langflow/api/v1/validate.py:validate-postvalidatecode-a-real-authenticated-http-post-to-api-v1. The attack vector is: Attack surface: HTTP or browser-backed service path. A public-facing route accepts raw Python source and forwards it into a server-side compile/exec validation path without any visible entitlement guard. ¶¶ A weakness has been identified in langflow-ai langflow up to 1.9.3. langflow contains a code injection vulnerability in validate-postvalidatecode-a-real-authenticated-http-post-to-api-v1 (src/backend/base/langflow/api/v1/validate.py:13). An authenticated attacker can execute arbitrary Python code on the server by submitting malicious code to the /api/v1/validate/code endpoint, which directly executes user-supplied code without sandboxing or security controls.
Affected Software
Event History
Frequently Asked Questions
Is this advisory still active?
No. It was withdrawn on 2026-10-05 as a duplicate of GHSA-w584-2h2r-2hvf, and is retained only to preserve external references.
What access does an attacker need to exploit the issue?
An attacker needs to be authenticated and able to send an HTTP POST request to the /api/v1/validate/code endpoint. The affected route accepts Python source that is executed on the server.
What systems are exposed?
Langflow deployments with the affected API route reachable through an HTTP or browser-backed service path are exposed to authenticated users. The description identifies langflow versions up to 1.9.3.
What is the impact of successful exploitation?
A successful attacker can execute arbitrary Python code on the Langflow server remotely. The supplied code is executed without sandboxing or other stated security controls.