AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

LangflowGHSA-56m6-4mhw-h3g5

langflow has vulnerability in PythonCodeTool component

Langflow

CVE-2024-42835 · Published Oct 31, 2024 · updated Jun 6, 2026

High9.8
No fix yet
GitHub advisory

langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.

Affected versions

PackageAffectedFixed in
langflow
PyPI
<= 1.0.12No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Also known as
CVE-2024-42835, PYSEC-2024-279

More Langflow advisories

All Langflow
Critical 8.8Dec 6, 2025Langflow CORS misconfiguration enables Account Takeover and RCECVE-2025-34291fixed in 1.7.0High 8.8Aug 25, 2025Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)CVE-2025-57760fixed in 1.5.1CriticalJun 17, 2025Langflow Unauth RCECVE-2025-3248fixed in 1.3.0Medium 9.8Nov 5, 2024Langflow vulnerable to remote code executionCVE-2024-48061no fix yetMedium 3.5Sep 27, 2024Inefficient Regular Expression Complexity in langflowCVE-2024-9277no fix yetHigh 8.8Jun 10, 2024Langflow remote code execution vulnerabilityCVE-2024-37014fixed in 1.0.15