{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.18"}],"component":"langflow","cve_ids":["CVE-2024-48061"],"ecosystem":"PyPI","epss":0.01541,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5p5r-57fx-pmfr","id":"tcs_01M5KF1DVMS9679RPHTXWRY5KK","modified_at":"2026-07-07T17:57:09.072768614Z","published_at":"2024-11-05T00:31:28Z","references":["https://osv.dev/vulnerability/GHSA-5p5r-57fx-pmfr","https://nvd.nist.gov/vuln/detail/CVE-2024-48061","https://github.com/langflow-ai/langflow/issues/696","https://gist.github.com/AfterSnows/1e58257867002462923fd62dde2b5d61","https://github.com/langflow-ai/langflow","https://rumbling-slice-eb0.notion.site/There-is-a-Remote-Code-Execution-RCE-vulnerability-in-the-repository-https-github-com-langflow-a-105e3cda9e8c800fac92f1b571bd40d8"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5p5r-57fx-pmfr","url":"https://osv.dev/vulnerability/GHSA-5p5r-57fx-pmfr"}],"summary":"Langflow vulnerable to remote code execution"}