langflow vulnerabilities (PyPI)
43 vulnerabilities.
-
langflowPyPI Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling) 6.3 Medium -
langflowPyPI Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write 7.1 High -
langflowPyPI Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers 7.1 High -
langflowPyPI Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints 5.4 Medium -
langflowPyPI Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration 9.9 Critical -
langflowPyPI Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description 9.8 Critical -
langflowPyPI Langflow is affected by weaknesses in secret handling and sensitive configuration access 7.4 High -
langflowPyPI Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution 9.8 Critical -
langflowPyPI Code Injection Vulnerability in Code Validation Endpoint 9.9 Critical -
langflowPyPI Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection 10.0 Critical -
langflowPyPI Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit 9.6 Critical -
langflowPyPI Langflow: Unauthenticated DoS through multipart form boundary file upload 7.5 High -
langflowPyPI Langflow: Logout button does not clear session 6.1 Medium -
langflowPyPI Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow 8.4 High -
langflowPyPI Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak 9.3 Critical -
langflowPyPI Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read 6.1 Medium -
langflowPyPI Langflow: Unauthenticated RCE in Shareable Playgrounds 9.6 Critical -
langflowPyPI Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint 6.5 Medium -
langflowPyPI Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints 8.8 High -
langflowPyPI Langflow: Path Traversal in Langflow Knowledge Bases API 9.6 Critical -
langflowPyPI langflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection 5.3 Medium -
langflowPyPI langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection 5.3 Medium -
langflowPyPI langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file 5.3 Medium -
langflowPyPI langflow-ai langflow Flow Using API core.py has_api_terms credentials storage 5.1 Medium -
langflowPyPI Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check 8.7 High -
langflowPyPI Langflow has Authenticated Code Execution in Agentic Assistant Validation 9.3 Critical -
langflowPyPI Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading 8.7 High -
langflowPyPI Langflow has Unauthenticated IDOR on Image Downloads 7.5 High -
langflowPyPI Langflow has an Arbitrary File Write (RCE) via v2 API 10.0 Critical -
langflowPyPI Langflow has Missing Ownership Verification in API Key Deletion (IDOR) 6.1 Medium -
langflowPyPI Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint 9.3 Critical -
langflowPyPI Langflow has Remote Code Execution in CSV Agent 9.8 Critical -
langflowPyPI Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability 9.8 Critical -
langflowPyPI Langflow Missing Authentication on Critical API Endpoints 8.8 High -
langflowPyPI Langflow Vulnerable to External Control of File Name or Path 7.1 High -
langflowPyPI Langflow vulnerable to Server-Side Request Forgery 7.7 High -
langflowPyPI Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE 9.4 Critical -
langflowPyPI Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation 8.8 High -
langflowPyPI Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code 9.8 Critical -
langflowPyPI Langflow vulnerable to remote code execution 9.8 Critical -
langflowPyPI langflow has vulnerability in PythonCodeTool component 9.8 Critical -
langflowPyPI Langflow HTTP POST Request utils.py redos 5.1 Medium -
langflowPyPI Langflow remote code execution vulnerability 9.8 Critical