LA
Vendor
langflow-ai
33
CVEs
3
On KEV
9
New 30D
Products
LA9.9
langflow
langflow-ai
29 CVEs3 on KEV6 new
LA9.9
langflow-base
langflow-ai
3 CVEs0 on KEV2 new
LF9.9
lfx
langflow-ai
1 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105741 | LA langflow langflow-ai | 7.1 | Oct 5 | Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write |
| CVE-2026-105740 | LA langflow langflow-ai | 9.9 | Oct 5 | Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server |
| CVE-2026-105699 | LA langflow langflow-ai | 7.1 | Oct 5 | Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers |
| CVE-2026-105698 | LA langflow langflow-ai | 5.4 | Oct 5 | Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints |
| CVE-2026-105697 | LF lfx langflow-ai | 9.9 | Oct 5 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration |
| CVE-2026-101861 | LA langflow langflow-ai | 4.1 | Sep 28 | Langflow Code Execution via eval() in Component Input Schema |
| CVE-2026-48520 | LA langflow langflow-ai | 6.1 | Jun 23 | Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read |
| CVE-2026-33760 | LA langflow langflow-ai | 8.8 | Jun 23 | Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints |
| CVE-2026-42867 | LA langflow langflow-ai | 6.5 | Jun 23 | Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint |
| CVE-2026-55255 In wildKEV | LA langflow langflow-ai | 8.4 | Jun 23 | Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow |
| CVE-2026-55423 | LA langflow langflow-ai | 6.1 | Jun 23 | Langflow: Logout button does not clear session |
| CVE-2026-55446 | LA langflow langflow-ai | 7.5 | Jun 23 | Langflow: Unauthenticated DoS through multipart form boundary file upload |
| CVE-2026-48519 | LA langflow langflow-ai | 9.6 | Jun 23 | Langflow: Unauthenticated RCE in Shareable Playgrounds |
| CVE-2026-55447 | LA langflow langflow-ai | 9.6 | Jun 23 | Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit |
| CVE-2026-55450 | LA langflow langflow-ai | 9.3 | Jun 23 | Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak |
| CVE-2026-42048 | LA langflow langflow-ai | 9.6 | May 12 | Langflow: Path Traversal in Langflow Knowledge Bases API |
| CVE-2026-34046 | LA langflow langflow-ai | 8.8 | Mar 27 | Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check |
| CVE-2026-33873 | LA langflow langflow-ai | 9.9 | Mar 27 | Langflow has Authenticated Code Execution in Agentic Assistant Validation |
| CVE-2026-5027 | LA langflow langflow-ai | 8.8 | Mar 27 | Langflow - Path Traversal Arbitrary File Write via upload_user_file |
| CVE-2026-5026 | LA langflow langflow-ai | 5.4 | Mar 27 | Langflow - Stored XSS via Malicious SVG Upload |
| CVE-2026-5025 | LA langflow langflow-ai | 6.5 | Mar 27 | Langflow - Application Logs Exposed to All Authenticated Users |
| CVE-2026-5022 | LA langflow langflow-ai | 5.3 | Mar 27 | Langflow - Missing Authorization on download_image Endpoint |
| CVE-2026-33497 | LA langflow langflow-ai | 7.5 | Mar 24 | Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading |
| CVE-2026-33484 | LA langflow langflow-ai | 7.5 | Mar 24 | Langflow has Unauthenticated IDOR on Image Downloads |
| CVE-2026-33475 | LA langflow langflow-ai | 9.1 | Mar 24 | Langflow GitHub Actions Shell Injection |
| CVE-2026-33309 | LA langflow langflow-ai | 9.9 | Mar 24 | Langflow has an Arbitrary File Write (RCE) via v2 API |
| CVE-2026-33053 | LA langflow langflow-ai | 8.8 | Mar 20 | Langflow has Missing Ownership Verification in API Key Deletion (IDOR) |
| CVE-2026-33017 In wildKEV | LA langflow langflow-ai | 9.8 | Mar 20 | Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint |
| CVE-2025-3248 RansomwareIn wildKEV | LA langflow langflow-ai | 9.8 | Apr 7 | Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code |