Skip to contentLangflow vulnerabilities
Newest
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-976808.3 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-976558.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-976768.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-1013296.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-1013317.7 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-1033608.1 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-1043349.8 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilitiesCVE-2026-104335Public exploit8.8 High
- ibm langflow oss, langflow +1 moreIncomplete Security Scanner Blocklist Enables Network-Based Code ExecutionCVE-2026-129449.6 Critical
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to authentication bypass and insufficient session expirationCVE-2026-127634.2 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by server-side request forgery due to missing URL validation in flow componentsCVE-2026-127656.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple componentsCVE-2026-127665.4 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesCVE-2026-127676.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by improper authentication due to missing password verification in the password reset endpointCVE-2026-176285.4 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-760598.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-785698.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-785718.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-785758.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesCVE-2026-797235.0 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-797249.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validationCVE-2026-797256.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-797428.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-812049.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-812118.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-819418.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesCVE-2026-812138.6 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesCVE-2026-812657.5 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to authentication bypass and insufficient session expirationCVE-2026-812688.1 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-819408.8 High
- ibm langflow oss, langflow +1 moreA path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystemCVE-2026-848898.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsCVE-2026-850259.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validationCVE-2026-92256.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base componentsCVE-2026-144706.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpointCVE-2026-176274.9 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base componentsCVE-2026-176215.4 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base componentsCVE-2026-176226.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by server-side request forgery due to missing URL validation in flow componentsCVE-2026-176315.0 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpointCVE-2026-192988.8 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple componentsCVE-2026-193015.0 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing componentsCVE-2026-193038.1 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flowsCVE-2026-193007.5 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor componentsCVE-2026-192996.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor componentsCVE-2026-193026.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple componentsCVE-2026-193047.7 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple componentsCVE-2026-193058.6 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor componentsCVE-2026-193067.7 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing componentsCVE-2026-91386.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trustCVE-2026-84476.1 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trustCVE-2026-91866.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcementCVE-2026-19295Public exploit9.9 Critical
- Show moreLoading…