Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Langflow allows unauthenticated attackers to execute arbitrary code by sending malicious input to the validate endpoint via the exec_globals parameter. This happens because the application includes untrusted code in its execution context, giving attackers complete control over the server.
The vulnerability exists in the validate endpoint's handling of the exec_globals parameter, which includes functionality from an untrusted control sphere without proper validation. Remote attackers can exploit this without authentication to execute arbitrary code with root privileges by injecting malicious payloads into the exec_globals parameter.