{"vulnerability": "CVE-2026-48519", "sightings": [{"uuid": "75bc7ca7-0a99-4063-a545-e38b8d565554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-poc-pubblico-per-lo-sfruttamento-della-cve-2026-48519", "content": "", "creation_timestamp": "2026-06-05T00:32:37.000000Z"}, {"uuid": "91f1fe1b-ed0d-4772-81d5-1ea210ffd3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48519", "type": "published-proof-of-concept", "source": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-v5ff-9q35-q26f", "content": "", "creation_timestamp": "2026-05-27T15:10:13.000000Z"}, {"uuid": "ee3ec044-64a2-4e8c-b8b8-f78fd64eed68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpatu5nmht2n", "content": "\ud83d\udccc CVE-2026-48519 - Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the \"Shareable Playground\" (or \"Public Flows\" in code) ... https://www.cyberhub.blog/cves/CVE-2026-48519", "creation_timestamp": "2026-06-27T06:37:08.460345Z"}, {"uuid": "7be8aec0-a66c-4b2f-88af-4b264c62497f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpatu6qvlb2j", "content": "\ud83d\udccc CVE-2026-48519 - Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the \"Shareable Playground\" (or \"Public Flows\" in code) ... https://www.potatohub.blog/cves/CVE-2026-48519", "creation_timestamp": "2026-06-27T06:37:09.026280Z"}, {"uuid": "85d487ab-f0f7-4af1-b5a6-e64b5bf95bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjoyzdfek2o", "content": "\u300cLangflow\u300d\u306bRCE\u8106\u5f31\u6027 - \u30d5\u30ed\u30fc\u5171\u6709\u74b0\u5883\u306b\u5f71\u97ff\n\n\u300cLangflow\u300d\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30d5\u30ed\u30fc\u3092\u5171\u6709\u3057\u3066\u3044\u308b\u74b0\u5883\u306b\u304a\u3044\u3066\u6df1\u523b\u306a\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3057\u3066\u3044\u308b\u3002\n\n\u30d5\u30ed\u30fc\u3092\u5171\u6709\u3059\u308b\u300cShareable Playground\u300d\u300cPublic Flows\u300d\u306a\u3069\u306e\u6a5f\u80fd\u306b\u8106\u5f31\u6027\u300cCVE-2026-48519\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\n\n\u540c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30ea\u30f3\u30af\u3092\u4ecb\u3057\u3066\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3002\u7d30\u5de5\u3057\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u884c\u3046\u3053\u3068\u3067\u3001\u30b5\u30fc\u30d0\u306b\u304a\u3044\u3066\u4efb\u610f\u306ePython\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-13T12:29:32.098516Z"}, {"uuid": "6eaaff06-55fa-4ba7-9cf0-1536be0ef6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48519", "type": "seen", "source": "https://t.me/GithubRedTeam/103053", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IBM-Langflow-CVE-2026-48519-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lukehebe\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 16:45:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-48519 pre-auth rce poc in IBM langflow <= 1.9.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T17:00:08.000000Z"}]}