Skip to contentLangflow vulnerabilities
Newest
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilitiesCVE-2026-192946.4 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcementCVE-2026-19286Public exploit9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilitiesCVE-2026-189048.2 High
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilitiesCVE-2026-188997.5 High
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilitiesCVE-2026-188918.2 High
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcementCVE-2026-18729Public exploit8.8 High
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilitiesCVE-2026-185454.3 Medium
- ibm langflow oss, langflow +1 moreUnauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in LangflowCVE-2026-198757.5 High
- ibm langflow oss, langflow +1 moreInsufficient Authentication Brute Force Protection on Login EndpointCVE-2026-192979.1 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-176248.5 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-17633Public exploit8.5 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-176328.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-91968.1 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-81828.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-92018.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlingCVE-2026-84788.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementCVE-2026-81837.7 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementCVE-2026-76586.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementCVE-2026-91307.1 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementCVE-2026-105475.9 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementCVE-2026-78695.4 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by weaknesses in secret handling and sensitive configuration accessCVE-2026-84707.4 High
- ibm langflow oss, langflow +1 moreLangflow is affected by weaknesses in secret handling and sensitive configuration accessCVE-2026-9205Fix available7.4 High
- ibm langflow oss, langflow +1 moreLangflow is affected by weaknesses in secret handling and sensitive configuration accessCVE-2026-101286.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by server-side request forgery in provider validation and API request functionalityCVE-2026-90817.1 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by server-side request forgery in provider validation and API request functionalityCVE-2026-76576.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by OS Command Injection in Model Context Protocol featuresCVE-2026-176257.2 High
- ibm langflow oss, langflow +1 moreLangflow is affected OS Command Injection in Model Context Protocol featuresCVE-2026-176238.8 High
- ibm langflow oss, langflow +1 moreLangflow is affected by security vulnerabilities in Model Context Protocol featuresCVE-2026-176307.2 High
- ibm langflow oss, langflow +1 moreLangflow is affected by security vulnerabilities in Model Context Protocol featuresCVE-2026-176268.8 High
- ibm langflow oss, langflow +1 moreLangflow is affected by security vulnerabilities in Model Context Protocol featuresCVE-2026-84467.5 High
- ibm langflow oss, langflow +1 moreLangflow is affected by security vulnerabilities in Model Context Protocol featuresCVE-2026-76466.5 Medium
- ibm langflow oss, langflow +1 moreReliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol featuresCVE-2026-90778.5 High
- ibm langflow oss, langflow +1 moreRemote Code Execution in CUGA Component CodeAgentCVE-2026-129469.9 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134448.1 High
- ibm langflow oss, langflow +1 moreBroken Access Control Vulnerabilities in Langflow 1.0.0 - 1.8.4 File Handling API Allowed Unauthorized Access to User FilesCVE-2026-107006.5 Medium
- ibm langflow oss, langflow +1 morePython Interpreter Sandbox Bypass Leading to Sensitive Data ExposureCVE-2026-134359.9 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-129427.5 High
- ibm langflow oss, langflow +1 moreLangflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-129457.1 High
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-12940Public exploit9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134427.1 High
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134458.1 High
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134469.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134488.1 High
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-144998.8 High
- ibm langflow oss, langflow +1 morePath Traversal Vulnerability in API Request Component Content-Disposition Header ProcessingCVE-2026-76678.8 High
- ibm langflow oss, langflow +1 moreSSRF Protection Configuration VulnerabilityCVE-2026-77547.7 High
- ibm langflow oss, langflow +1 moreMCP Server Configuration Validator Bypass via File Upload APICVE-2026-77558.8 High
- ibm langflow oss, langflow +1 morePath Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication BypassCVE-2026-78727.5 High
- ibm langflow oss, langflow +1 moreParameter Injection Vulnerability in API Graph Execution EngineCVE-2026-80568.8 High
- Show moreLoading…