{"id":"CVE-2026-12822","state":"PUBLISHED","title":"langflow-ai langflow Bundle URL Loader code injection","description":"A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. The attack needs to be performed locally. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-06-21T23:30:09.211Z","updatedAt":"2026-06-23T13:39:24.719Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["langflow-ai langflow"],"affected":[{"vendor":"langflow-ai","product":"langflow","versions":[{"version":"1.9.0","status":"affected"},{"version":"1.9.1","status":"affected"},{"version":"1.9.2","status":"affected"},{"version":"1.9.3","status":"affected"}],"cpes":["cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*"],"modules":["Bundle URL Loader"]}],"references":["https://vuldb.com/vuln/372612","https://vuldb.com/vuln/372612/cti","https://vuldb.com/cve/CVE-2026-12822","https://vuldb.com/submit/837582","https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md"],"weaknesses":["CWE-94","CWE-74"],"ingestedAt":"2026-10-29T20:10:52.580Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/12xxx/CVE-2026-12822.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-12822","state":"PUBLISHED","datePublished":"2026-06-21T23:30:09.211Z","dateUpdated":"2026-06-23T13:39:24.719Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-06-21T13:14:48.566Z"},"containers":{"cna":{"title":"langflow-ai langflow Bundle URL Loader code injection","descriptions":[{"lang":"en","value":"A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads to code injection. The attack needs to be performed locally. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"langflow-ai","product":"langflow","versions":[{"version":"1.9.0","status":"affected"},{"version":"1.9.1","status":"affected"},{"version":"1.9.2","status":"affected"},{"version":"1.9.3","status":"affected"}],"cpes":["cpe:2.3:a:langflow:langflow:*:*:*:*:*:*:*:*"],"modules":["Bundle URL Loader"]}],"references":[{"url":"https://vuldb.com/vuln/372612","name":"VDB-372612 | langflow-ai langflow Bundle URL Loader code injection","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/372612/cti","name":"VDB-372612 | CTI Indicators (IOB, IOC, TTP)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-12822","name":"CVE-2026-12822 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/837582","name":"Submit #837582 | langflow-ai/langflow - `Langflow bundle URL loading` - `custom component discovery/import path` <=1.9.3 Remote Code Execution / Untrusted Code Loading","tags":["third-party-advisory"]},{"url":"https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md","tags":["related"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-94","type":"CWE","lang":"en","description":"Code Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-06-21T23:30:09.211Z"},"timeline":[{"time":"2026-06-21T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-06-21T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-06-21T15:19:52.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"ST4R (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://github.com/dxz0069/softwareoverflow/blob/main/langflow_bundle_url_custom_component_startup_rce_vulndb.md","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-23T13:38:49.223145Z","id":"CVE-2026-12822","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-23T13:39:24.719Z"}}]}}}