Langflow-ai vulnerabilities

Products

• Langflow 49
• Langflow-base 3

Newest

• langflow-ai langflow Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write CVE-2026-105741 Fix available 7.1 HighOctober 5, 2026
• langflow-ai langflow Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server CVE-2026-105740 9.9 CriticalOctober 5, 2026
• langflow-ai langflow Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers CVE-2026-105699 Fix available 7.1 HighOctober 5, 2026
• langflow-ai langflow, langflow-base +1 more Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints CVE-2026-105698 Fix available 5.4 MediumOctober 5, 2026
• langflow-ai langflow, langflow-base, lfx +2 more Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration CVE-2026-105697 Public exploitFix available 9.9 CriticalOctober 5, 2026
• langflow-ai langflow Langflow Code Execution via eval() in Component Input Schema CVE-2026-101861 2.1 LowSeptember 28, 2026
• langflow langflow-ai langflow Bundle URL Loader code injection CVE-2026-12822 4.8 MediumJune 21, 2026
• langflow Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit CVE-2026-55447 Fix available 9.6 CriticalJune 19, 2026
• langflow Langflow: Unauthenticated DoS through multipart form boundary file upload CVE-2026-55446 Fix available 7.5 HighJune 19, 2026
• langflow Langflow: Logout button does not clear session CVE-2026-55423 Fix available 6.1 MediumJune 19, 2026
• langflow Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow CVE-2026-55255 In KEVPublic exploitFix available 8.4 HighJune 19, 2026
• langflow Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak CVE-2026-55450 Public exploitFix available 9.3 CriticalJune 17, 2026
• langflow Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read CVE-2026-48520 Fix available 6.1 MediumJune 16, 2026
• langflow Langflow: Unauthenticated RCE in Shareable Playgrounds CVE-2026-48519 Public exploitFix available 9.6 CriticalJune 16, 2026
• langflow Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint CVE-2026-42867 Fix available 6.5 MediumJune 16, 2026
• langflow Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints CVE-2026-33760 Fix available 8.8 HighJune 16, 2026
• langflow Langflow: Path Traversal in Langflow Knowledge Bases API CVE-2026-42048 Public exploitFix available 9.6 CriticalMay 5, 2026
• langflow-ai langflow langflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection CVE-2026-7700 Fix available 5.3 MediumMay 3, 2026
• langflow-ai langflow langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection CVE-2026-7687 5.3 MediumMay 3, 2026
• langflow-ai langflow langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting CVE-2026-6600 5.1 MediumApril 20, 2026
• langflow-ai langflow langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection CVE-2026-6599 5.3 MediumApril 20, 2026
• langflow-ai langflow langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file CVE-2026-6598 Fix available 5.3 MediumApril 20, 2026
• langflow-ai langflow langflow-ai langflow Flow Using API core.py has_api_terms credentials storage CVE-2026-6597 5.1 MediumApril 20, 2026
• langflow-ai langflow langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload CVE-2026-6596 Fix available 6.9 MediumApril 20, 2026
• langflow, langflow langflow-base +1 more Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check CVE-2026-34046 Fix available 8.7 HighMarch 27, 2026
• langflow Langflow - Path Traversal Arbitrary File Write via upload_user_file CVE-2026-5027 Public exploit EPSS 40.0% 8.8 HighMarch 27, 2026
• langflow Langflow - Stored XSS via Malicious SVG Upload CVE-2026-5026 7.0 HighMarch 27, 2026
• langflow Langflow - Application Logs Exposed to All Authenticated Users CVE-2026-5025 6.5 MediumMarch 27, 2026
• langflow Langflow - Missing Authorization on download_image Endpoint CVE-2026-5022 6.3 MediumMarch 27, 2026
• langflow Langflow has Authenticated Code Execution in Agentic Assistant Validation CVE-2026-33873 Fix available 9.3 CriticalMarch 26, 2026
• langflow Langflow GitHub Actions Shell Injection CVE-2026-33475 Public exploit 9.1 CriticalMarch 24, 2026
• langflow Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading CVE-2026-33497 Fix available EPSS 19.6% 8.7 HighMarch 20, 2026
• langflow Langflow has Unauthenticated IDOR on Image Downloads CVE-2026-33484 Fix available 7.5 HighMarch 20, 2026
• langflow Langflow has an Arbitrary File Write (RCE) via v2 API CVE-2026-33309 Fix available EPSS 13.5% 10.0 CriticalMarch 19, 2026
• langflow Langflow has Missing Ownership Verification in API Key Deletion (IDOR) CVE-2026-33053 Fix available 6.1 MediumMarch 18, 2026
• langflow Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint CVE-2026-33017 In KEVPublic exploitFix available EPSS 96.4% 9.3 CriticalMarch 17, 2026
• langflow Langflow has Remote Code Execution in CSV Agent CVE-2026-27966 Public exploit EPSS 35.2% 9.8 CriticalFebruary 26, 2026
• langflow Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2026-0772 7.5 HighJanuary 23, 2026
• langflow Langflow PythonFunction Code Injection Remote Code Execution Vulnerability CVE-2026-0771 7.1 HighJanuary 23, 2026
• langflow Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability CVE-2026-0770 In KEVPublic exploit EPSS 62.6% 9.8 CriticalJanuary 23, 2026
• langflow Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability CVE-2026-0769 Public exploit EPSS 41.2% 9.8 CriticalJanuary 23, 2026
• langflow Langflow code Code Injection Remote Code Execution Vulnerability CVE-2026-0768 Public exploit EPSS 28.1% 9.8 CriticalJanuary 23, 2026
• langflow Langflow Missing Authentication on Critical API Endpoints CVE-2026-21445 Public exploitFix available EPSS 33.3% 8.8 HighJanuary 2, 2026
• langflow Langflow Vulnerable to External Control of File Name or Path CVE-2025-68478 Fix available 7.1 HighDecember 19, 2025
• langflow Langflow vulnerable to Server-Side Request Forgery CVE-2025-68477 Fix available 7.7 HighDecember 19, 2025
• langflow Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE CVE-2025-34291 In KEVPublic exploitFix available EPSS 93.2% 9.4 CriticalDecember 5, 2025
• langflow Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation CVE-2025-57760 Fix available 8.8 HighAugust 25, 2025
• langflow Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code CVE-2025-3248 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalApril 7, 2025
• langflow Langflow HTTP POST Request utils.py redos CVE-2024-9277 5.1 MediumSeptember 27, 2024