CVE-2024-42835 — langflow has vulnerability in langflow — CVE Details
langflow has vulnerability in PythonCodeTool component
Summary
Advisory Timeline
- First published October 31, 2024 (711 days ago).
- Last revised June 6, 2026 — 582 days after initial publication.
Affected Packages (1)
Affects 1 ecosystem: pypi (1).
| Package | Ecosystem | Affected | Fixed In |
|---|---|---|---|
| langflow | pypi | 0.0.31, 0.0.32, 0.0.33, 0.0.40 (+233 more) | Range-based data available |
CVSS Score Breakdown
What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Frequently Asked Questions
- What is CVE-2024-42835?
- langflow has vulnerability in PythonCodeTool component This vulnerability has been assigned a severity rating of HIGH (CVSS score: 9.8/10).
- How do I check if my project is affected by CVE-2024-42835?
- CVE-2024-42835 affects langflow. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2024-42835 and 200,000+ other known vulnerabilities.
Severity & Exploitability
Exploitation is straightforward and causes maximum impact. Patch immediately.
Also Known As
Related CVEs
- CVE-2026-55447CRITICAL
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
- CVE-2026-8505CRITICAL
Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
- CVE-2026-33309CRITICAL
Langflow has an Arbitrary File Write (RCE) via v2 API
- CVE-2025-3248CRITICAL
Langflow Unauth RCE
- CVE-2026-48519CRITICAL
Langflow: Unauthenticated RCE in Shareable Playgrounds
- CVE-2026-33873CRITICAL
Langflow has Authenticated Code Execution in Agentic Assistant Validation
- CVE-2026-33017CRITICAL
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
- CVE-2026-0770HIGH
Langflow affected by Remote Code Execution via validate_code() exec()
Check if you're affected
Scan your dependencies to see if this vulnerability affects your projects.
Scan Your Dependencies