LA
Product
langflow
On CISA KEVExploited in the wildRansomware-linked
24
CVEs
3
On KEV
9.9
Max CVSS
6
New 30D
Severity mix
Critical 11High 9Medium 8Low 0
Watch
Add langflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33017 In wildKEV | 9.8 | Mar 20 | Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint Affected: < 1.9.0 |
| CVE-2025-3248 RansomwareIn wildKEV | 9.8 | Apr 7 | Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code Affected: before 1.3.0 |
| CVE-2026-55255 In wildKEV | 8.4 | Jun 23 | Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow Affected: < 1.9.1 |
| CVE-2026-105740 | 9.9 | Oct 5 | Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server Affected: < 1.9.0 |
| CVE-2026-105697 | 9.9 | Oct 5 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration Affected: >= 1.1.2, < 1.10.3 |
| CVE-2026-33873 | 9.9 | Mar 27 | Langflow has Authenticated Code Execution in Agentic Assistant Validation Affected: < 1.9.0 |
| CVE-2026-33309 | 9.9 | Mar 24 | Langflow has an Arbitrary File Write (RCE) via v2 API Affected: >= 1.2.0, < 1.9.0 |
| CVE-2026-48519 | 9.6 | Jun 23 | Langflow: Unauthenticated RCE in Shareable Playgrounds Affected: < 1.9.2 |
| CVE-2026-55447 | 9.6 | Jun 23 | Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit Affected: < 1.9.2 |
| CVE-2026-42048 | 9.6 | May 12 | Langflow: Path Traversal in Langflow Knowledge Bases API Affected: < 1.9.0 |
| CVE-2026-55450 | 9.3 | Jun 23 | Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak Affected: < 1.9.1 |
| CVE-2026-33475 | 9.1 | Mar 24 | Langflow GitHub Actions Shell Injection Affected: < 1.9.0 |
| CVE-2026-33760 | 8.8 | Jun 23 | Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints Affected: < 1.9.0 |
| CVE-2026-34046 | 8.8 | Mar 27 | Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check Affected: < 1.5.1 |
| CVE-2026-5027 | 8.8 | Mar 27 | Langflow - Path Traversal Arbitrary File Write via upload_user_file Affected: 0 |
| CVE-2026-55446 | 7.5 | Jun 23 | Langflow: Unauthenticated DoS through multipart form boundary file upload Affected: < 1.0.19 |
| CVE-2026-33497 | 7.5 | Mar 24 | Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading Affected: < 1.7.1 |
| CVE-2026-33484 | 7.5 | Mar 24 | Langflow has Unauthenticated IDOR on Image Downloads Affected: >= 1.0.0, < 1.9.0 |
| CVE-2026-105741 | 7.1 | Oct 5 | Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write Affected: >= 1.5.0, < 1.10.3 |
| CVE-2026-105699 | 7.1 | Oct 5 | Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers Affected: >= 1.6.8, <= 1.9.0 |
| CVE-2026-42867 | 6.5 | Jun 23 | Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint Affected: < 1.9.0 |
| CVE-2026-5025 | 6.5 | Mar 27 | Langflow - Application Logs Exposed to All Authenticated Users Affected: 0 |
| CVE-2026-48520 | 6.1 | Jun 23 | Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read Affected: < 1.10.0 |
| CVE-2026-55423 | 6.1 | Jun 23 | Langflow: Logout button does not clear session Affected: < 1.7.0 |
| CVE-2026-105698 | 5.4 | Oct 5 | Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints Affected: >= 1.0.0, < 1.10.1 |
| CVE-2026-5026 | 5.4 | Mar 27 | Langflow - Stored XSS via Malicious SVG Upload Affected: 0 |
| CVE-2026-5022 | 5.3 | Mar 27 | Langflow - Missing Authorization on download_image Endpoint Affected: 0 |
| CVE-2026-101861 | 4.1 | Sep 28 | Langflow Code Execution via eval() in Component Input Schema Affected: 1.0.16 before 1.12.0; 0.0.94 before 1.12.0 |
Showing 28