LA
Product
langflow-base
3
CVEs
0
On KEV
9.9
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add langflow-base to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105697 | 9.9 | Oct 5 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration Affected: >= 0.1.2, < 0.10.3 |
| CVE-2026-34046 | 8.8 | Mar 27 | Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check Affected: < 0.5.1 |
| CVE-2026-105698 | 5.4 | Oct 5 | Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints Affected: < 0.10.1 |
Showing 3