Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Advisories.Gitlab • October 6, 2026

Share: View original

A critical Authenticated Remote Code Execution (RCE) vulnerability exists in the validate_code function of Langflow. The /api/v1/validate/code endpoint, meant to validate user-supplied code, leverages Python’s exec() function. While it attempts to restrict execution to function definitions, it fails to account for decorators, which are evaluated at definition time. This allows any authenticated user to execute arbitrary code on the server, resulting in a full system compromise.

gist.github.com /Ro1ME/c11b1e63e4e8fca6b25275144f25ec2a

github.com /advisories/GHSA-w584-2h2r-2hvf

github.com /langflow-ai/langflow/commit/e7c33dbaade20b5295c7fa26bf83cc1ff68fba02

github.com /langflow-ai/langflow/issues/13336

github.com /langflow-ai/langflow/pull/13696

github.com /langflow-ai/langflow/releases/tag/v1.10.1

github.com /langflow-ai/langflow/security/advisories/GHSA-w584-2h2r-2hvf

nvd.nist.gov /vuln/detail/CVE-2026-51886

Code Behaviors & Features

Detect and mitigate CVE-2026-51886 with GitLab Dependency Scanning

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Langflow's Code Validation Endpoint A critical Authenticated Remote Code Execution (RCE) vulnerability, tracked as CVE-2026-51886, has been identified in Langflow's validate_code function. The /api/v1/validate/code endpoint allows authenticated users to submit arbitrary Python code, which is executed server-side via Python's exec() function without proper security controls. This flaw enables attackers to execute malicious code, leading to potential system compromise. The vulnerability affects Langflow versions up to 1.9.3 and was patched in version 1.10.1. Prior to the fix, the endpoint had no authentication until a commit in September 2026. The vulnerability was disclosed on October 1, 2026, with a CVSS score of 9.8, indicating a critical severity level. Security professionals are urged to update to the latest version to mitigate risks. 2 sources 78

Extracted Entities

Attack Types (1)

Zero-day Exploit

Companies (1)

CVEs (1)

CWE Weaknesses (1)

CWE-94 - Code Injection

Domains (2)

gist.github.com nvd.nist.gov

MD5 Hashes (1)

c11b1e63e4e8fca6b25275144f25ec2a

MITRE ATT&CK (2)

T1059.006 - Python T1059 - Command and Scripting Interpreter

SHA1 Hashes (1)

e7c33dbaade20b5295c7fa26bf83cc1ff68fba02

Tools (1)