SSRF via HTTP Redirect Following in Langflow API Request Component

Langflow OSS is affected by multiple vulnerabilities

Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection

Langflow OSS is affected by multiple vulnerabilities

Langflow is vulnerable to authentication bypass and insufficient session expiration

Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication Bypass

Unauthenticated Session History Access via Public Flow Execution

Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id

langflow-ai langflow Bundle URL Loader code injection

Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows

Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow

Langflow is affected by security vulnerabilities in Model Context Protocol features

Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints

Langflow: Unauthenticated DoS through multipart form boundary file upload

Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS

Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading

Langflow has Unauthenticated IDOR on Image Downloads

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability

langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload

Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint

Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints

Langflow PythonFunction Code Injection Remote Code Execution Vulnerability

Langflow is a tool for building and deploying AI-powered agents and workflows

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow OSS is affected by multiple vulnerabilities

Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation

Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components