LO
Product
Langflow OSS
On CISA KEVExploited in the wild
142
CVEs
1
On KEV
10.0
Max CVSS
25
New 30D
Severity mix
Critical 37High 70Medium 35Low 0
Watch
Add Langflow OSS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12942 | 7.5 | Jul 30 | Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-7528 | 7.5 | May 27 | Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS Affected: 1.0.0 through 1.9.0 |
| CVE-2026-17627 | 7.1 | Sep 4 | Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint Affected: 1.0.0 through 1.10.2 |
| CVE-2026-9130 | 7.1 | Aug 5 | Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement Affected: 1.0.0 through 1.10.3 |
| CVE-2026-9081 | 7.1 | Aug 5 | Langflow OSS is affected by server-side request forgery in provider validation and API request functionality Affected: 1.0.0 through 1.10.3 |
| CVE-2026-12945 | 7.1 | Jul 30 | Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-13442 | 7.1 | Jul 28 | Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-93448 | 6.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-93677 | 6.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-97671 | 6.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-101329 | 6.5 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-101331 | 6.5 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-103360 | 6.5 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-12765 | 6.5 | Sep 14 | Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components Affected: 1.0.0 through 1.10.2 |
| CVE-2026-12767 | 6.5 | Sep 14 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches Affected: 1.0.0 through 1.11.5 |
| CVE-2026-79725 | 6.5 | Sep 10 | Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation Affected: 1.0.0 through 1.11.5 |
| CVE-2026-9225 | 6.5 | Sep 10 | Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation Affected: 1.0.0 through 1.11.5 |
| CVE-2026-14470 | 6.5 | Sep 4 | Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components Affected: 1.0.0 through 1.10.2 |
| CVE-2026-17622 | 6.5 | Sep 4 | Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components Affected: 1.0.0 through 1.10.2 |
| CVE-2026-17631 | 6.5 | Sep 4 | Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components Affected: 1.0.0 through 1.10.2 |
| CVE-2026-19301 | 6.5 | Sep 4 | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-19299 | 6.5 | Sep 4 | Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-19302 | 6.5 | Sep 4 | Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-9138 | 6.5 | Sep 4 | Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-9186 | 6.5 | Sep 4 | Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust Affected: 1.0.0 through 1.11.2 |
| CVE-2026-19294 | 6.5 | Aug 28 | Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities Affected: 1.0.0 through 1.11.1 |
| CVE-2026-7658 | 6.5 | Aug 5 | Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement Affected: 1.0.0 through 1.10.3 |
| CVE-2026-10128 | 6.5 | Aug 5 | Langflow is affected by weaknesses in secret handling and sensitive configuration access Affected: 1.0.0 through 1.10.3 |
| CVE-2026-7657 | 6.5 | Aug 5 | Langflow OSS is affected by server-side request forgery in provider validation and API request functionality Affected: 1.0.0 through 1.10.3 |
| CVE-2026-7646 | 6.5 | Aug 5 | Langflow is affected by security vulnerabilities in Model Context Protocol features Affected: 1.0.0 through 1.10.3 |
| CVE-2026-10700 | 6.5 | Jul 30 | Broken Access Control Vulnerabilities in Langflow 1.0.0 - 1.8.4 File Handling API Allowed Unauthorized Access to User Files Affected: 1.0.0 through 1.8.4 |
| CVE-2026-7754 | 6.5 | Jul 17 | SSRF Protection Configuration Vulnerability Affected: 1.0.0 through 1.10.0 |
| CVE-2026-10546 | 6.5 | Jun 30 | DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component Affected: 1.0.0 through 1.9.3 |
| CVE-2026-8447 | 6.1 | Sep 4 | Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust Affected: 1.0.0 through 1.11.2 |
| CVE-2026-12766 | 5.4 | Sep 14 | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-17628 | 5.4 | Sep 14 | Langflow is affected by improper authentication due to missing password verification in the password reset endpoint Affected: 1.0.0 through 1.10.2 |
| CVE-2026-17621 | 5.4 | Sep 4 | Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components Affected: 1.0.0 through 1.10.2 |
| CVE-2026-7869 | 5.4 | Aug 5 | Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement Affected: 1.0.0 through 1.10.3 |
| CVE-2026-79723 | 5.0 | Sep 10 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches Affected: 1.0.0 through 1.11.5 |
| CVE-2026-93679 | 4.3 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-18545 | 4.3 | Aug 28 | Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities Affected: 1.0.0 through 1.11.1 |
| CVE-2026-12763 | 4.2 | Sep 14 | Langflow is vulnerable to authentication bypass and insufficient session expiration Affected: 1.0.0 through 1.11.5 |