Ò»¡¢·ì϶¸ÅÊö
·ìϼûû³Æ | Langflow API Éí·ÝÑé֤ȱʧ·ì϶ |
CVE ID | CVE-2026-21445 |
·ì϶ÀàÐÍ | ÈÏÖ¤ÓëÊÚȨȱʧ | ·¢ÏÖ¹¦·ò | 2026-1-4 |
·ì϶ÆÀ·Ö | 8.8 | ·ì϶µÈ¼¶ | ¸ßΣ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ÎÞ |
ÀûÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»±ØÒª |
PoC/EXP | Òѹ«¿ª | ÔÚÒ°ÀûÓà | δ·¢ÏÖ |
LangflowÊÇÒ»¸ö»ùÓÚFastAPI¹¹½¨µÄ¿ªÔ´¿ò¼Ü £¬£¬£¬£¬£¬£¬ÓÃÓÚ¼ò»¯ºÍÖÎÀíÌìȻ˵»°´¦Öã¨NLP£©¹¤×÷Á÷µÄ¿ª·¢¡£¡£¡£¡£¡£ËüÌṩÁËÒ»Ì×Ö±¹ÛµÄAPI½Ó¿Ú £¬£¬£¬£¬£¬£¬Ô®ÊÖ¿ª·¢Õß¼±¾ç¹¹½¨ºÍ²¿Êð¶Ô»°ÏµÍ³¡¢×Ô¶¯»¯¹¤×÷µÅצÓᣡ£¡£¡£¡£LangflowÖ¼ÔÚÌṩ½Ã½ÝµÄÀ©´óÐԺ͸ßЧµÄÊý¾Ý´¦ÖÃÄÜÁ¦ £¬£¬£¬£¬£¬£¬ºÏÓÃÓÚ¸÷ÀàNLPÏîÄ¿ £¬£¬£¬£¬£¬£¬Ö§³ÖÓë¶à¸ö»úе½ø½¨Ä£ÐͺÍÊý¾ÝÔ´µÄ¼¯³É¡£¡£¡£¡£¡£
2026Äê1ÔÂ4ÈÕ £¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯Íż¯ÍÅVSRC¼à²âµ½Langflow´æÔÚ¶à¸ö¹Ø¼üAP½Ó¿Ú¶ÌȱÉí·ÝÑéÖ¤½ÚÔìµÄ·ì϶ £¬£¬£¬£¬£¬£¬µ¼ÖÂδ¾¹ýÉí·ÝÑéÖ¤µÄÓû§¿ÉÄܽӼûÃô¸ÐµÄÓû§¶Ô»°Êý¾Ý¡¢ÂòÂôº¹Çà¼Í¼ £¬£¬£¬£¬£¬£¬²¢Ö´ÐзÛËéÐÔ²Ù×÷ £¬£¬£¬£¬£¬£¬Ô̺¬É¾³ýÐÂÎŵȡ£¡£¡£¡£¡£ÕâЩ·ì϶³Ê´Ë¿Ìsrc/backend/base/langflow/api/v1/monitor.pyÎļþÖеÄÈý¸öAPI½Ó¿Ú £¬£¬£¬£¬£¬£¬¾ßÌåΪ£º»ñÈ¡ÐÂÎÅ¡¢»ñÈ¡ÂòÂô¼Í¼ºÍɾ³ý»á»°ÐÂÎÅ¡£¡£¡£¡£¡£ÓÉÓÚ¶Ìȱ±ØÒªµÄÉí·ÝÑéÖ¤ÒÀÀµ£¨Depends(get_current_active_user)£© £¬£¬£¬£¬£¬£¬¹¥»÷ÕßÄܹ»ÔÚδÌṩÉí·ÝÑéÖ¤ÐÅÏ¢µÄÇé¿öϽӼûÕâЩ½Ó¿Ú £¬£¬£¬£¬£¬£¬´Ó¶øµ¼ÖÂÓû§Êý¾Ýй¶¡¢ÒþÖÔ¼Óº¦¼°Êý¾ÝÏú»Ù·çÏÕ¡£¡£¡£¡£¡£·ì϶ÆÀ·Ö8.8·Ö £¬£¬£¬£¬£¬£¬·ì϶¼¶±ð¸ßΣ¡£¡£¡£¡£¡£
¶þ¡¢Ó°ÏìÁìÓò
Langflow <= 1.7.0
Èý¡¢°²È«´ëÊ©
3.1 Éý¼¶°æ±¾
¹Ù·½ÒÑ°ä²¼½¨¸´²¹¶¡ £¬£¬£¬£¬£¬£¬ÒÔ½¨¸´¸Ã·ì϶¡£¡£¡£¡£¡£
ÏÂÔØÁ´½Ó£ºhttps://github.com/langflow-ai/langflow/releases/
3.2 һʱ´ëÊ©
ÔÝÎÞ¡£¡£¡£¡£¡£
3.3 ͨÓý¨Òé
? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡ £¬£¬£¬£¬£¬£¬Ï÷¼õϵͳ·ì϶ £¬£¬£¬£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£¡£? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔì £¬£¬£¬£¬£¬£¬Åú¸Ä·À»ðǽսÊõ £¬£¬£¬£¬£¬£¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ £¬£¬£¬£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø £¬£¬£¬£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£¡£? ʹÓÃÆóÒµ¼¶°²È«²úÆ· £¬£¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£¡£? ¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí £¬£¬£¬£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò £¬£¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£? ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£¡£
3.4 ²Î¿¼Á´½Ó
https://github.com/langflow-ai/langflow/security/advisories/GHSA-c5cp-vx83-jhqx/https://nvd.nist.gov/vuln/detail/CVE-2026-21445
¾©¹«Íø°²±¸11010802024551ºÅ