LA
Vendor
langflow-ai
192
CVEs
6
On KEV
24
New 30D
Products
LA10.0
langflow
langflow-ai
184 CVEs6 on KEV24 new
LD8.8
Langflow Desktop
Langflow
7 CVEs0 on KEV0 new
LA8.8
Langflow-base
Langflow
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-88962 | LA Langflow Langflow | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93443 | LA Langflow Langflow | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93448 | LA Langflow Langflow | 6.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93449 | LA Langflow Langflow | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93445 | LA Langflow Langflow | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93447 | LA Langflow Langflow | 7.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93675 | LA Langflow Langflow | 9.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93677 | LA Langflow Langflow | 6.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93678 | LA Langflow Langflow | 7.6 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93679 | LA Langflow Langflow | 4.3 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-93674 | LA Langflow Langflow | 9.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97671 | LA Langflow Langflow | 6.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97673 | LA Langflow Langflow | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97674 | LA Langflow Langflow | 8.1 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97678 | LA Langflow Langflow | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97679 | LA Langflow Langflow | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97680 | LA Langflow Langflow | 8.3 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97655 | LA Langflow Langflow | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-97676 | LA Langflow Langflow | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-101329 | LA Langflow Langflow | 6.5 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-101331 | LA Langflow Langflow | 6.5 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-103360 | LA Langflow Langflow | 6.5 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104334 | LA Langflow Langflow | 9.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-104335 | LA Langflow Langflow | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities |
| CVE-2026-76059 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-78569 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-78571 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-78575 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-79723 | LA Langflow Langflow | 5.0 | Sep 10 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches |
| CVE-2026-79724 | LA Langflow Langflow | 9.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-79725 | LA Langflow Langflow | 6.5 | Sep 10 | Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation |
| CVE-2026-79742 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-81204 | LA Langflow Langflow | 9.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-81211 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-81941 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-81213 | LA Langflow Langflow | 8.6 | Sep 10 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches |
| CVE-2026-81265 | LA Langflow Langflow | 7.5 | Sep 10 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches |
| CVE-2026-81268 | LA Langflow Langflow | 8.1 | Sep 10 | Langflow is vulnerable to authentication bypass and insufficient session expiration |
| CVE-2026-81940 | LA Langflow Langflow | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-84889 | LA Langflow Langflow | 8.8 | Sep 10 | A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem |
| CVE-2026-85025 | LA Langflow Langflow | 9.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards |
| CVE-2026-9225 | LA Langflow Langflow | 6.5 | Sep 10 | Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation |
| CVE-2026-14470 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components |
| CVE-2026-17627 | LA Langflow Langflow | 7.1 | Sep 4 | Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint |
| CVE-2026-17621 | LA Langflow Langflow | 5.4 | Sep 4 | Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components |
| CVE-2026-17622 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components |
| CVE-2026-17631 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components |
| CVE-2026-19298 | LA Langflow Langflow | 8.8 | Sep 4 | Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint |
| CVE-2026-19301 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components |
| CVE-2026-19303 | LA Langflow Langflow | 8.1 | Sep 4 | Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components |
| CVE-2026-19300 | LA Langflow Langflow | 7.5 | Sep 4 | Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows |
| CVE-2026-19299 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components |
| CVE-2026-19302 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components |
| CVE-2026-19304 | LA Langflow Langflow | 7.7 | Sep 4 | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components |
| CVE-2026-19305 | LA Langflow Langflow | 7.5 | Sep 4 | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components |
| CVE-2026-19306 | LA Langflow Langflow | 7.7 | Sep 4 | Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components |
| CVE-2026-9138 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components |
| CVE-2026-8447 | LA Langflow Langflow | 6.1 | Sep 4 | Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust |
| CVE-2026-9186 | LA Langflow Langflow | 6.5 | Sep 4 | Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust |
| CVE-2026-19295 | LA Langflow Langflow | 9.9 | Aug 28 | Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement |