{"cvss":0.0,"datePublished":"2026-08-01T00:00:00Z","dateUpdated":"2026-08-01T00:00:00Z","description":"Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the \"POST /api/v1/custom_component\" endpoint and provide a Python script.","dueDate":"","id":"CVE-2024-37014","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Langflow","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Langflow '/api/v1/custom_component' Remote Code Execution","vendor":"Langflow"}