CVE-2026-51886
2 advisories.
PyPI/langflow CVE-2026-51886: high 8.8
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
Action: Upgrade langflow to 1.10.1 or later.
pip install langflow==1.10.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.2 | 1.10.1 | - |
Fixed versions
| 1.10.1 |
Sources
- osv: GHSA-w584-2h2r-2hvf
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-w584-2h2r-2hvf
- https://nvd.nist.gov/vuln/detail/CVE-2026-51886
- https://github.com/langflow-ai/langflow/issues/13336
- https://github.com/langflow-ai/langflow/pull/13696
- https://github.com/langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02
- https://gist.github.com/Ro1ME/c11b1e63e4e8fca6b25275144f25ec2a
- https://github.com/langflow-ai/langflow
- https://github.com/langflow-ai/langflow/releases/tag/v1.10.1
CVE-2026-51886 · published · modified · JSON
PyPI/langflow CVE-2026-51886: high 8.8
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
Action: Upgrade langflow to 1.10.1 or later.
pip install langflow==1.10.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.2 | 1.10.1 | - |
Fixed versions
| 1.10.1 |
Sources
- osv: PYSEC-2026-4236
- https://github.com/langflow-ai/langflow/security/advisories/GHSA-w584-2h2r-2hvf
- https://nvd.nist.gov/vuln/detail/CVE-2026-51886
- https://github.com/langflow-ai/langflow/issues/13336
- https://github.com/langflow-ai/langflow/pull/13696
- https://github.com/langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02
- https://gist.github.com/Ro1ME/c11b1e63e4e8fca6b25275144f25ec2a
- https://github.com/langflow-ai/langflow
- https://github.com/langflow-ai/langflow/releases/tag/v1.10.1
- https://pypi.org/project/langflow
- https://github.com/advisories/GHSA-w584-2h2r-2hvf
CVE-2026-51886 · published · modified · JSON