[ Vendor · 10 CVEs ]
langflow-ai
CVEs affecting langflow-ai published in the last 30 days, plus any langflow-ai CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105697 | 5 Oct 2026 | CVSS 9.9 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationLangflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever… | Fix |
| CVE-2026-105698 | 5 Oct 2026 | CVSS 5.4 | Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpointsLangflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the… | Fix |
| CVE-2026-105699 | 5 Oct 2026 | CVSS 7.1 | Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersLangflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the project… | Fix |
| CVE-2026-105740 | 5 Oct 2026 | CVSS 9.9 | langflow-ai langflowLangflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote… | |
| CVE-2026-105741 | 5 Oct 2026 | CVSS 7.1 | Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration WriteLangflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model… | Fix |
| CVE-2026-101861 | 28 Sep 2026 | CVSS 4.1 | langflow-ai langflowLangflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to… | |
| CVE-2026-55255 | 23 Jun 2026 | CVSS 8.4 | Langflow Authorization Bypass Through User-Controlled KeyLangflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR)… | ExploitedFix |
| CVE-2026-7700 | 3 May 2026 | CVSS 6.3 | Langflow: Prompt injection in Langflow Smart Transform can lead to code executionA weakness has been identified in langflow-ai langflow up to 1.10.2. This affects the function eval of the file… | Fix |
| CVE-2026-33017 | 20 Mar 2026 | CVSS 9.8 | Langflow Code InjectionLangflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST… | ExploitedFix |
| CVE-2025-3248 | 7 Apr 2025 | CVSS 9.8 | Langflow Missing AuthenticationLangflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can… | ExploitedFix |