Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem

Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint

Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Langflow is affected by OS Command Injection in Model Context Protocol features

Langflow is affected OS Command Injection in Model Context Protocol features

Langflow is affected by security vulnerabilities in Model Context Protocol features

Langflow is affected by security vulnerabilities in Model Context Protocol features

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing

MCP Server Configuration Validator Bypass via File Upload API

Parameter Injection Vulnerability in API Graph Execution Engine

Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints

IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file

Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check

Langflow - Path Traversal Arbitrary File Write via upload_user_file

Langflow has Missing Ownership Verification in API Key Deletion (IDOR)

Langflow is a tool for building and deploying AI-powered agents and workflows

Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain super admin privileges by performing a…

Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features

SSRF via HTTP Redirect Following in Langflow API Request Component

Langflow OSS is affected by multiple vulnerabilities

Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities