Vulnerability · Published Jun 21, 2026 · Assigned by VulDB
CVE-2026-12822langflow-ai langflow Bundle URL Loader code injection
Medium 5.3
In plain English
A medium-severity code injection in langflow from langflow-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 79.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. The attack needs to be performed locally. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| langflow-ai | langflow | 1.9.01.9.11.9.21.9.3 |
Weakness: CWE-94, CWE-74 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-372612 | langflow-ai langflow Bundle URL Loader code injection vdb-entry
- VDB-372612 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- CVE-2026-12822 | CVE Analysis and Report third-party-advisory
- Submit #837582 | langflow-ai/langflow - `Langflow bundle URL loading` - `custom component discovery/import path` <=1.9.3 Remote Code Execution / Untrusted Code Loading third-party-advisory
- https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md related