Login Request a demo
LA
Product
langflow
by langflow-ai · last CVE Oct 5, 2026
On CISA KEVExploited in the wildRansomware-linked
33
CVEs
3
On KEV
9.9
Max CVSS
5
New 30D
Vulnerabilities33In the news12Timeline
Severity mix
Critical 13High 11Medium 9Low 0
Severity
All severities33Critical13High11Medium9Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add langflow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33017
In wildKEV
9.8
96%
Mar 20
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
Affected: < 1.9.0
CVE-2025-3248
RansomwareIn wildKEV
9.8
100%
Apr 7
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
Affected: before 1.3.0
Showing 2