LA
Product
langflow
by langflow-ai · last CVE Oct 7, 2026
On CISA KEVExploited in the wildRansomware-linked
184
CVEs
6
On KEV
10.0
Max CVSS
24
New 30D
Severity mix
Critical 53High 87Medium 42Low 2
Watch

Add langflow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-6600
3.5
0%
Apr 20
langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting
Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3
CVE-2026-6597
2.7
0%
Apr 20
langflow-ai langflow Flow Using API core.py has_api_terms credentials storage
Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3
Showing 2