Login Request a demo
LD
Product
Langflow Desktop
by Langflow · last CVE Jun 11, 2026
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 0
Severity
All severities7Critical0High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Langflow Desktop to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3345
6.5
0%
Apr 30
Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint
Affected: through 1.8.4
CVE-2026-3340
6.5
0%
Apr 30
Server-Side Request Forgery (SSRF) in Langflow URL Component
Affected: 1.0.0 through 1.8.4
CVE-2026-4502
6.5
0%
Apr 30
Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API
Affected: 1.2.0 through 1.8.4
CVE-2026-3346
6.4
0%
Apr 30
Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw
Affected: 1.6.0 through 1.8.4
CVE-2026-3341
5.4
0%
Jun 11
IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services
Affected: 1.0.0 before 1.9.3
Showing 5