LA
Product
langflow
On CISA KEVExploited in the wildRansomware-linked
30
CVEs
3
On KEV
9.9
Max CVSS
5
New 30D
Severity mix
Critical 12High 10Medium 8Low 0
Watch
Add langflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33017 In wildKEV | 9.8 | Mar 20 | Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint Affected: < 1.9.0 |
| CVE-2025-3248 RansomwareIn wildKEV | 9.8 | Apr 7 | Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code Affected: before 1.3.0 |
| CVE-2026-105740 | 9.9 | Oct 5 | Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server Affected: < 1.9.0 |
| CVE-2026-105697 | 9.9 | Oct 5 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration Affected: >= 1.1.2, < 1.10.3 |
| CVE-2026-33873 | 9.9 | Mar 27 | Langflow has Authenticated Code Execution in Agentic Assistant Validation Affected: < 1.9.0 |
| CVE-2026-33309 | 9.9 | Mar 24 | Langflow has an Arbitrary File Write (RCE) via v2 API Affected: >= 1.2.0, < 1.9.0 |
| CVE-2026-27966 | 9.8 | Feb 26 | Langflow has Remote Code Execution in CSV Agent Affected: < 1.8.0 |
| CVE-2026-48519 | 9.6 | Jun 23 | Langflow: Unauthenticated RCE in Shareable Playgrounds Affected: < 1.9.2 |
| CVE-2026-55447 | 9.6 | Jun 23 | Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit Affected: < 1.9.2 |
| CVE-2026-42048 | 9.6 | May 12 | Langflow: Path Traversal in Langflow Knowledge Bases API Affected: < 1.9.0 |
| CVE-2026-55450 | 9.3 | Jun 23 | Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak Affected: < 1.9.1 |
| CVE-2026-33475 | 9.1 | Mar 24 | Langflow GitHub Actions Shell Injection Affected: < 1.9.0 |
Showing 12