Login Request a demo
LO
Product
Langflow OSS
by IBM · last CVE Aug 19, 2026
On CISA KEVExploited in the wild
2
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news4Timeline
Severity mix
Critical 1High 1Medium 0Low 0
Severity
All severities2Critical1High1Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Langflow OSS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-9198
In wildKEV
9.8
29%
Jul 17
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Affected: All versions, or not specified
CVE-2026-19875
7.5
1%
Aug 19
Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow
Affected: 1.0.0 through 1.10.0
Showing 2