gcdRadar
products/langflow

Langflow

Filed as: Langflow OSS, IBM Langflow OSS, langflow, IBM Langflow Desktop, Langflow Desktop

Records
224
Disclosed CVEs
217
Exploited (sev 3–4)
6
CISA KEV flagged
3

Newest record 2026-11-08 · 217 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Exploited or KEV-listed · 6

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

  1. closed9.9
    Langflow Langflow Remote Code Execution via MCP Stdio Transport

    Exploited · since 5 Oct 2026 · updated 15 Oct 2026 · CVE-2026-105740

    AI
  2. closed
    DeepSeek Threat Actor Uses DeepSeek-Powered Hermes Agent for Exploitation

    Exploited · since 7 May 2026

    AI
  3. closed9.8
    Langflow CVE-2026-9198: IBM Langflow OSS unauthenticated RCE vulnerability

    Exploited · since 17 Jul 2026 · CVE-2026-9198

    AI
  4. closed
    Langflow LLM-Driven Ransomware Operator JADEPUFFER Targeted Production Database

    Exploited · since 1 Jul 2026

    AI
  5. closed8.4
    Langflow Langflow IDOR Vulnerability Allows Unauthorized Flow Execution

    Exploited · since 23 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55255

    AI
  6. closed9.3
    Langflow CVE-2025-3248: Langflow Code Injection Vulnerability

    Exploited · since 7 Apr 2025 · updated 17 Jun 2025 · CVE-2025-3248

    AI

Disclosures by month · last 24 months

Dec ’24212 disclosed · peak 45 in Oct ’26Nov ’26

Disclosed CVEs, no confirmed exploitation · 217

  1. closed8.1
    Langflow CVE-2026-97677: IBM Langflow OSS Arbitrary File Read and Write

    Disclosed · since 8 Nov 2026 · CVE-2026-97677

    AI
  2. closed9.8
    Langflow CVE-2026-93680: IBM Langflow OSS Authentication Bypass Vulnerability

    Disclosed · Patched · since 29 Oct 2026 · updated 2 Nov 2026 · CVE-2026-93680

    AI
  3. closed9.8
    Langflow CVE-2026-110186: IBM Langflow OSS Code Generation Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-110186

    AI
  4. closed9.9
    Langflow CVE-2026-107327: IBM Langflow OSS Remote Code Execution Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-107327

    AI
  5. closed9.9
    Langflow CVE-2026-107329: IBM Langflow OSS remote code execution vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-107329

    AI
  6. closed9.9
    Langflow CVE-2026-107328: IBM Langflow OSS remote code execution vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-107328

    AI
  7. closed9.8
    Langflow CVE-2026-104339: IBM Langflow OSS OS command injection vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-104339

    AI
  8. closed4.3
    Langflow CVE-2026-104308: IBM Langflow OSS Command Injection Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-104308

    AI
  9. closed6.5
    Langflow CVE-2026-77817: IBM Langflow OSS Information Disclosure Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-77817

    AI
  10. closed8.1
    Langflow CVE-2026-104317: IBM Langflow OSS Deserialization Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-104317

    AI
  11. closed6.5
    Langflow CVE-2026-110190: IBM Langflow OSS Directory Traversal Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-110190

    AI
  12. closed6.5
    Langflow CVE-2026-104314: IBM Langflow OSS Credential Disclosure Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-104314

    AI
  13. closed8.8
    Langflow CVE-2026-110196: IBM Langflow OSS Remote Code Execution Vulnerability

    Disclosed · since 29 Oct 2026 · CVE-2026-110196

    AI
  14. closed8.8
    Langflow CVE-2026-110193: IBM Langflow OSS Agentic Assistant Command Execution Flaw

    Disclosed · Patched · since 29 Oct 2026 · CVE-2026-110193

    AI
  15. closed8.3
    Langflow CVE-2026-107366: IBM Langflow OSS lacks ownership verification on message endpoints enabling session hijacking

    Disclosed · since 20 Oct 2026 · CVE-2026-107366

    AI
  16. closed8.8
    Langflow CVE-2026-93675: IBM Langflow OSS dependency confusion vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-93675

    AI
  17. closed8.8
    Langflow CVE-2026-104335: IBM Langflow OSS access control vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-104335

    AI
  18. closed8.8
    Langflow CVE-2026-97678: IBM Langflow OSS input validation vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-97678

    AI
  19. closed8.8
    Langflow CVE-2026-97673: IBM Langflow OSS input validation vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-97673

    AI
  20. closed9.8
    Langflow CVE-2026-104334: IBM Langflow OSS remote code execution vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-104334

    AI
  21. closed7.6
    Langflow CVE-2026-93678: IBM Langflow OSS Improper Authorization

    Disclosed · since 7 Oct 2026 · CVE-2026-93678

    AI
  22. closed6.5
    Langflow CVE-2026-101329: IBM Langflow OSS Improper Access Control

    Disclosed · since 7 Oct 2026 · CVE-2026-101329

    AI
  23. closed8.5
    Langflow CVE-2026-93449: IBM Langflow OSS Arbitrary Code Execution

    Disclosed · since 7 Oct 2026 · CVE-2026-93449

    AI
  24. closed8.8
    Langflow CVE-2026-88962: IBM Langflow OSS Arbitrary Code Execution

    Disclosed · since 7 Oct 2026 · CVE-2026-88962

    AI
  25. closed6.5
    Langflow CVE-2026-97671: IBM Langflow OSS Path Traversal Vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-97671

    AI
  26. closed8.8
    Langflow CVE-2026-97655: IBM Langflow OSS Security Scanner Bypass Vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-97655

    AI
  27. closed8.1
    Langflow CVE-2026-93445: IBM Langflow OSS Code Generation Vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-93445

    AI
  28. closed7.7
    Langflow CVE-2026-101331: IBM Langflow OSS Credential Exposure Vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-101331

    AI
  29. closed9.8
    Langflow CVE-2026-93674: IBM Langflow OSS OS Command Execution Vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-93674

    AI
  30. closed7.5
    Langflow CVE-2026-93443: IBM Langflow OSS Remote Code Execution Vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-93443

    AI
  31. closed7.7
    Langflow CVE-2026-93677: IBM Langflow OSS sensitive information exposure

    Disclosed · since 7 Oct 2026 · CVE-2026-93677

    AI
  32. closed4.3
    Langflow CVE-2026-93679: IBM Langflow OSS denial of service vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-93679

    AI
  33. closed8.1
    Langflow CVE-2026-103360: IBM Langflow OSS path limitation vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-103360

    AI
  34. closed6.5
    Langflow CVE-2026-93448: IBM Langflow OSS path traversal information disclosure

    Disclosed · since 7 Oct 2026 · CVE-2026-93448

    AI
  35. closed8.8
    Langflow CVE-2026-97676: IBM Langflow OSS remote code execution vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-97676

    AI
  36. closed8.3
    Langflow CVE-2026-97680: IBM Langflow OSS improper access control vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-97680

    AI
  37. closed8.8
    Langflow CVE-2026-97679: IBM Langflow OSS code injection vulnerability

    Disclosed · since 7 Oct 2026 · CVE-2026-97679

    AI
  38. closed8.1
    Langflow CVE-2026-97674: IBM Langflow OSS vulnerable to OS command injection

    Disclosed · since 7 Oct 2026 · CVE-2026-97674

    AI
  39. closed7.5
    Langflow CVE-2026-93447: IBM Langflow OSS vulnerable to insecure deserialization

    Disclosed · since 7 Oct 2026 · CVE-2026-93447

    AI
  40. closed
    Langflow Langflow SSRF Vulnerability in URL-Taking Components

    Disclosed · since 6 Oct 2026

    AI
  41. closed7.1
    Langflow CVE-2026-105699: Langflow Authenticated Cross-Project File Disclosure

    Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105699

    AI
  42. closed9.9
    Langflow Langflow OS Command Injection via MCP Stdio Server Configuration

    Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105697

    AI
  43. closed5.4
    Langflow CVE-2026-105698: Langflow Cross-User Flow Access and Vertex Execution

    Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105698

    AI
  44. closed7.1
    Langflow CVE-2026-105741: Langflow IP Spoofing Bypass for Configuration Write

    Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105741

    AI
  45. closed8.8
    Langflow CVE-2026-51886: Code injection vulnerability in Langflow

    Disclosed · since 1 Oct 2026 · updated 5 Oct 2026 · CVE-2026-51886

    AI
  46. closed7.5
    Langflow CVE-2026-51888: Directory traversal flaw in Langflow

    Disclosed · since 1 Oct 2026 · CVE-2026-51888

    AI
  47. closed4.1
    Langflow CVE-2026-101861: Langflow Unsafe Eval Code Execution Vulnerability

    Disclosed · since 28 Sep 2026 · CVE-2026-101861

    AI
  48. closed5.4
    Langflow CVE-2026-17628: IBM Langflow OSS Improper Authentication Vulnerability

    Disclosed · since 14 Sep 2026 · CVE-2026-17628

    AI
  49. closed4.2
    Langflow CVE-2026-12763: Improper cache key isolation vulnerability in Langflow MCP Tools

    Disclosed · since 14 Sep 2026 · CVE-2026-12763

    AI
  50. closed5.4
    Langflow CVE-2026-12766: Server-side request forgery vulnerability in Langflow OSS

    Disclosed · since 14 Sep 2026 · CVE-2026-12766

    AI
  51. closed6.5
    Langflow CVE-2026-12767: Server-side request forgery vulnerability in Langflow OSS

    Disclosed · since 14 Sep 2026 · CVE-2026-12767

    AI
  52. closed6.5
    Langflow CVE-2026-12765: Server-side request forgery vulnerability in Langflow OSS

    Disclosed · since 14 Sep 2026 · CVE-2026-12765

    AI
  53. closed9.6
    Langflow CVE-2026-12944: IBM Langflow OSS Arbitrary Code Execution

    Disclosed · since 14 Sep 2026 · CVE-2026-12944

    AI
  54. closed7.5
    Langflow CVE-2026-81265: IBM Langflow OSS security vulnerability

    Disclosed · since 10 Sep 2026 · CVE-2026-81265

    AI
  55. closed6.5
    Langflow CVE-2026-79725: IBM Langflow OSS arbitrary file read vulnerability

    Disclosed · since 10 Sep 2026 · CVE-2026-79725

    AI
  56. closed9.8
    Langflow CVE-2026-81204: Critical code injection vulnerability in IBM Langflow OSS

    Disclosed · since 10 Sep 2026 · CVE-2026-81204

    AI
  57. closed8.8
    Langflow CVE-2026-78569: Code execution vulnerability in IBM Langflow OSS security scanner

    Disclosed · since 10 Sep 2026 · CVE-2026-78569

    AI
  58. closed8.8
    Langflow CVE-2026-79742: Arbitrary code execution in IBM Langflow OSS due to blocklist flaw

    Disclosed · since 10 Sep 2026 · CVE-2026-79742

    AI
  59. closed8.8
    Langflow CVE-2026-78571: Remote code execution vulnerability in IBM Langflow OSS

    Disclosed · since 10 Sep 2026 · CVE-2026-78571

    AI
  60. closed5.0
    Langflow CVE-2026-79723: Information disclosure vulnerability in IBM Langflow OSS

    Disclosed · since 10 Sep 2026 · CVE-2026-79723

    AI
  61. closed8.8
    Langflow CVE-2026-84889: IBM Langflow OSS arbitrary code execution via path traversal

    Disclosed · since 10 Sep 2026 · CVE-2026-84889

    AI
  62. closed9.8
    Langflow CVE-2026-79724: IBM Langflow OSS remote OS command execution flaw

    Disclosed · since 10 Sep 2026 · CVE-2026-79724

    AI
  63. closed8.6
    Langflow CVE-2026-81213: IBM Langflow OSS internal resource information disclosure

    Disclosed · since 10 Sep 2026 · CVE-2026-81213

    AI
  64. closed8.8
    Langflow CVE-2026-81211: IBM Langflow OSS arbitrary Python code execution flaw

    Disclosed · since 10 Sep 2026 · CVE-2026-81211

    AI
  65. closed8.8
    Langflow CVE-2026-81940: IBM Langflow OSS remote code execution vulnerability

    Disclosed · since 10 Sep 2026 · CVE-2026-81940

    AI
  66. closed8.8
    Langflow CVE-2026-78575: IBM Langflow OSS Command Execution via MCP Stdio Server

    Disclosed · since 10 Sep 2026 · CVE-2026-78575

    AI
  67. closed8.1
    Langflow CVE-2026-81268: IBM Langflow OSS API Key Session Expiration Flaw

    Disclosed · since 10 Sep 2026 · CVE-2026-81268

    AI
  68. closed9.8
    Langflow CVE-2026-85025: IBM Langflow OSS Unauthenticated Code Execution via MCP Endpoints

    Disclosed · since 10 Sep 2026 · CVE-2026-85025

    AI
  69. closed8.8
    Langflow CVE-2026-76059: IBM Langflow OSS Static Security Scanner Bypass

    Disclosed · since 10 Sep 2026 · CVE-2026-76059

    AI
  70. closed6.5
    Langflow IBM Langflow OSS vulnerable to unauthorized file access

    Disclosed · since 10 Sep 2026 · CVE-2026-9225

    AI
  71. closed8.8
    Langflow IBM Langflow OSS vulnerable to arbitrary OS command execution

    Disclosed · since 10 Sep 2026 · CVE-2026-81941

    AI
  72. closed6.1
    Langflow CVE-2026-8447: Stored XSS vulnerability in IBM Langflow OSS playground

    Disclosed · since 4 Sep 2026 · CVE-2026-8447

    AI
  73. closed8.6
    Langflow CVE-2026-19305 in IBM Langflow OSS features severe server-side request forgery flaw

    Disclosed · since 4 Sep 2026 · CVE-2026-19305

    AI
  74. closed6.5
    Langflow CVE-2026-19299 in IBM Langflow OSS permits path traversal leading to information disclosure

    Disclosed · since 4 Sep 2026 · CVE-2026-19299

    AI
  75. closed5.0
    Langflow CVE-2026-19301 in IBM Langflow OSS enables server-side request forgery for data access

    Disclosed · since 4 Sep 2026 · CVE-2026-19301

    AI
  76. closed7.5
    Langflow CVE-2026-19300 in IBM Langflow OSS exposes sensitive credentials via incomplete scrubbing

    Disclosed · since 4 Sep 2026 · CVE-2026-19300

    AI
  77. closed6.5
    Langflow CVE-2026-19302 in IBM Langflow OSS allows information disclosure via symlink validation

    Disclosed · since 4 Sep 2026 · CVE-2026-19302

    AI
  78. closed8.8
    Langflow CVE-2026-19298: IBM Langflow OSS authorization bypass remote code execution

    Disclosed · since 4 Sep 2026 · CVE-2026-19298

    AI
  79. closed5.0
    Langflow CVE-2026-17631: IBM Langflow OSS server-side request forgery vulnerability

    Disclosed · since 4 Sep 2026 · CVE-2026-17631

    AI
  80. closed6.5
    Langflow CVE-2026-17622: IBM Langflow OSS information disclosure via path traversal

    Disclosed · since 4 Sep 2026 · CVE-2026-17622

    AI
  81. closed4.9
    Langflow CVE-2026-17627: IBM Langflow OSS improper authorization workflow history injection

    Disclosed · since 4 Sep 2026 · CVE-2026-17627

    AI
  82. closed8.1
    Langflow CVE-2026-19303: IBM Langflow OSS arbitrary local file deletion vulnerability

    Disclosed · since 4 Sep 2026 · CVE-2026-19303

    AI
  83. closed5.4
    Langflow CVE-2026-17621: IBM Langflow OSS remote directory traversal vulnerability

    Disclosed · since 4 Sep 2026 · CVE-2026-17621

    AI
  84. closed6.5
    Langflow CVE-2026-14470: IBM Langflow OSS directory traversal vulnerability

    Disclosed · since 4 Sep 2026 · CVE-2026-14470

    AI
  85. closed6.5
    Langflow CVE-2026-9186: IBM Langflow OSS localhost MCP configuration bypass

    Disclosed · since 4 Sep 2026 · CVE-2026-9186

    AI
  86. closed7.7
    Langflow CVE-2026-19306: IBM Langflow OSS arbitrary file read and data exfiltration

    Disclosed · since 4 Sep 2026 · CVE-2026-19306

    AI
  87. closed6.5
    Langflow CVE-2026-9138: IBM Langflow OSS arbitrary file write vulnerability

    Disclosed · since 4 Sep 2026 · CVE-2026-9138

    AI
  88. closed7.7
    Langflow CVE-2026-19304: IBM Langflow OSS URL parser discrepancy information disclosure

    Disclosed · since 4 Sep 2026 · CVE-2026-19304

    AI
  89. closed7.5
    Langflow CVE-2026-18899: IBM Langflow OSS path traversal vulnerability

    Disclosed · since 28 Aug 2026 · CVE-2026-18899

    AI
  90. closed8.8
    Langflow CVE-2026-18729: IBM Langflow OSS code generation control vulnerability

    Disclosed · since 28 Aug 2026 · CVE-2026-18729

    AI
  91. closed6.4
    Langflow CVE-2026-19294: IBM Langflow OSS improper authorization vulnerability

    Disclosed · since 28 Aug 2026 · CVE-2026-19294

    AI
  92. closed8.2
    Langflow CVE-2026-18891: IBM Langflow OSS improper authentication vulnerability

    Disclosed · since 28 Aug 2026 · CVE-2026-18891

    AI
  93. closed9.8
    Langflow CVE-2026-19286: RCE vulnerability in IBM Langflow OSS A2A public endpoint

    Disclosed · since 28 Aug 2026 · CVE-2026-19286

    AI
  94. closed8.2
    Langflow CVE-2026-18904: Information disclosure and message injection in IBM Langflow OSS

    Disclosed · since 28 Aug 2026 · CVE-2026-18904

    AI
  95. closed4.3
    Langflow CVE-2026-18545: SSRF vulnerability in IBM Langflow OSS

    Disclosed · since 28 Aug 2026 · CVE-2026-18545

    AI
  96. closed9.9
    Langflow CVE-2026-19295: Command execution vulnerability in IBM Langflow OSS

    Disclosed · since 28 Aug 2026 · CVE-2026-19295

    AI
  97. closed7.5
    Langflow CVE-2026-19875: IBM Langflow OSS missing authentication vulnerability

    Disclosed · since 19 Aug 2026 · CVE-2026-19875

    AI
  98. closed9.1
    Langflow CVE-2026-19297: IBM Langflow OSS authentication restriction vulnerability

    Disclosed · since 13 Aug 2026 · CVE-2026-19297

    AI
  99. closed8.5
    Langflow CVE-2026-17633: IBM Langflow OSS Authenticated Code Injection

    Disclosed · since 5 Aug 2026 · CVE-2026-17633

    AI
  100. closed7.2
    Langflow CVE-2026-17630: IBM Langflow OSS Arbitrary Code Execution

    Disclosed · since 5 Aug 2026 · CVE-2026-17630

    AI
  101. closed8.8
    Langflow CVE-2026-8478: IBM Langflow OSS Code Injection Vulnerability

    Disclosed · since 5 Aug 2026 · CVE-2026-8478

    AI
  102. closed6.5
    Langflow CVE-2026-7657: IBM Langflow OSS SSRF Vulnerability

    Disclosed · since 5 Aug 2026 · CVE-2026-7657

    AI
  103. closed8.8
    Langflow CVE-2026-8182: Unauthenticated Remote Code Execution in Langflow OSS

    Disclosed · since 5 Aug 2026 · CVE-2026-8182

    AI
  104. closed8.8
    Langflow CVE-2026-17632: Arbitrary Code Execution Flaw in Langflow OSS AST Scanning

    Disclosed · since 5 Aug 2026 · CVE-2026-17632

    AI
  105. closed8.8
    Langflow CVE-2026-17623: Improper Validation in Langflow OSS Allows Arbitrary Command Execution

    Disclosed · since 5 Aug 2026 · CVE-2026-17623

    AI
  106. closed8.5
    Langflow CVE-2026-9077: Localhost Restriction Bypass in Langflow OSS Writes Arbitrary MCP Configs

    Disclosed · since 5 Aug 2026 · CVE-2026-9077

    AI
  107. closed7.5
    Langflow CVE-2026-8446: Authentication Bypass in Langflow OSS MCP Composer Endpoint

    Disclosed · since 5 Aug 2026 · CVE-2026-8446

    AI
  108. closed6.5
    Langflow CVE-2026-10128: Environment variable exposure vulnerability in IBM Langflow OSS

    Disclosed · since 5 Aug 2026 · CVE-2026-10128

    AI
  109. closed8.8
    Langflow CVE-2026-17626: Sensitive host file exposure via Docker MCP in IBM Langflow OSS

    Disclosed · since 5 Aug 2026 · CVE-2026-17626

    AI
  110. closed8.5
    Langflow CVE-2026-17624: Arbitrary code execution vulnerability in IBM Langflow OSS

    Disclosed · since 5 Aug 2026 · CVE-2026-17624

    AI
  111. closed7.2
    Langflow CVE-2026-17625: OS command execution vulnerability in IBM Langflow OSS

    Disclosed · since 5 Aug 2026 · CVE-2026-17625

    AI
  112. closed6.5
    Langflow CVE-2026-7646: Arbitrary file read vulnerability in IBM Langflow OSS

    Disclosed · since 5 Aug 2026 · CVE-2026-7646

    AI
  113. closed5.9
    Langflow CVE-2026-10547: IBM Langflow OSS Ownership Validation Flaw

    Disclosed · since 5 Aug 2026 · CVE-2026-10547

    AI
  114. closed6.5
    Langflow CVE-2026-7658: IBM Langflow OSS Username Path Traversal Vulnerability

    Disclosed · since 5 Aug 2026 · CVE-2026-7658

    AI
  115. closed7.7
    Langflow CVE-2026-8183: IBM Langflow OSS Directory Traversal Vulnerability

    Disclosed · since 5 Aug 2026 · CVE-2026-8183

    AI
  116. closed5.4
    Langflow CVE-2026-7869: IBM Langflow OSS Path Traversal in Knowledge Bases API

    Disclosed · since 5 Aug 2026 · CVE-2026-7869

    AI
  117. closed7.4
    Langflow CVE-2026-8470: IBM Langflow OSS Weak Cryptographic Key Generation

    Disclosed · since 5 Aug 2026 · CVE-2026-8470

    AI
  118. closed7.1
    Langflow IBM Langflow OSS Server-Side Request Forgery vulnerability in Ollama provider

    Disclosed · since 5 Aug 2026 · CVE-2026-9081

    AI
  119. closed8.1
    Langflow IBM Langflow OSS executes unintended code during Agentic Assistant validation

    Disclosed · since 5 Aug 2026 · CVE-2026-9196

    AI
  120. closed7.1
    Langflow IBM Langflow OSS authorization bypass in MemoryComponent leads to chat history exposure

    Disclosed · since 5 Aug 2026 · CVE-2026-9130

    AI
  121. closed8.8
    Langflow IBM Langflow OSS cryptographic weakness allows arbitrary code execution

    Disclosed · since 5 Aug 2026 · CVE-2026-9201

    AI
  122. closed9.1
    Langflow CVE-2026-9205: Langflow Weak Fernet Key Derivation via random.seed()

    Disclosed · since 5 Oct 2026 · updated 5 Oct 2026 · CVE-2026-9205

    AI
  123. closed
    Langflow Langflow Duplicate Advisory GHSA-9pw3-x84f-xcwf for Weak Key Derivation

    Disclosed · since 5 Aug 2026

    AI
  124. closed9.9
    Langflow CVE-2026-13435: IBM Langflow OSS PythonREPL Sandbox Input Validation Flaw

    Disclosed · since 30 Jul 2026 · CVE-2026-13435

    AI
  125. closed9.9
    Langflow CVE-2026-12946: IBM Langflow OSS Remote Code Execution Vulnerability

    Disclosed · since 30 Jul 2026 · CVE-2026-12946

    AI
  126. closed7.1
    Langflow CVE-2026-12945: IBM Langflow OSS Build Job Manipulation Vulnerability

    Disclosed · since 30 Jul 2026 · CVE-2026-12945

    AI
  127. closed7.5
    Langflow CVE-2026-12942: IBM Langflow OSS Directory Traversal Vulnerability

    Disclosed · since 30 Jul 2026 · CVE-2026-12942

    AI
  128. closed9.8
    Langflow CVE-2026-12940: IBM Langflow OSS RCE via Environment Variable Injection

    Disclosed · since 30 Jul 2026 · CVE-2026-12940

    AI
  129. closed8.1
    Langflow CVE-2026-13444: IBM Langflow OSS Unauthorized Access to Vector Documents

    Disclosed · since 30 Jul 2026 · CVE-2026-13444

    AI
  130. closed6.5
    Langflow CVE-2026-10700: IBM Langflow OSS Broken Access Control in File Handling API

    Disclosed · since 30 Jul 2026 · CVE-2026-10700

    AI
  131. closed7.1
    Langflow CVE-2026-13442: Vector namespace reuse vulnerability in IBM Langflow OSS

    Disclosed · since 28 Jul 2026 · CVE-2026-13442

    AI
  132. closed8.8
    Langflow CVE-2026-7755: IBM Langflow Remote Code Execution Vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-7755

    AI
  133. closed7.5
    Langflow CVE-2026-7872: IBM Langflow Arbitrary File Read and Token Forgery

    Disclosed · since 17 Jul 2026 · CVE-2026-7872

    AI
  134. closed7.7
    Langflow CVE-2026-7754: IBM Langflow SSRF Vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-7754

    AI
  135. closed8.8
    Langflow CVE-2026-8056: IBM Langflow OSS parameter overriding vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-8056

    AI
  136. closed8.8
    Langflow CVE-2026-14499: IBM Langflow OSS arbitrary command execution via Python Interpreter

    Disclosed · since 17 Jul 2026 · CVE-2026-14499

    AI
  137. closed9.8
    Langflow CVE-2026-13446: IBM Langflow OSS hard-coded credentials vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-13446

    AI
  138. closed9.9
    Langflow CVE-2026-8635: IBM Langflow OSS authentication bypass and privilege escalation

    Disclosed · since 17 Jul 2026 · CVE-2026-8635

    AI
  139. closed9.8
    Langflow CVE-2026-9202: IBM Langflow OSS Unauthenticated User Creation Vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-9202

    AI
  140. closed8.8
    Langflow CVE-2026-7667: IBM Langflow OSS Arbitrary File Write Vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-7667

    AI
  141. closed8.1
    Langflow CVE-2026-13448: IBM Langflow OSS Public Flow Build RCE Vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-13448

    AI
  142. closed9.9
    Langflow CVE-2026-8481: IBM Langflow OSS Code Validation RCE Vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-8481

    AI
  143. closed9.8
    Langflow CVE-2026-9103: IBM Langflow OSS Improper Authentication Vulnerability

    Disclosed · since 17 Jul 2026 · CVE-2026-9103

    AI
  144. closed8.1
    Langflow CVE-2026-13445: IBM Langflow OSS storage boundary violation in SaveToFile component

    Disclosed · since 17 Jul 2026 · CVE-2026-13445

    AI
  145. closed9.9
    Langflow CVE-2026-8859: IBM Langflow OSS path traversal allows arbitrary file write

    Disclosed · since 17 Jul 2026 · CVE-2026-8859

    AI
  146. closed9.9
    Langflow CVE-2026-8476: IBM Langflow OSS remote code execution via unsafe pickle deserialization

    Disclosed · since 17 Jul 2026 · CVE-2026-8476

    AI
  147. closed9.9
    Langflow CVE-2026-9135: IBM Langflow OSS code injection via ToolGuard dynamic fields

    Disclosed · since 17 Jul 2026 · CVE-2026-9135

    AI
  148. closed9.8
    Langflow CVE-2026-8505: Langflow Unauthenticated Flow Execution via Webhook Bypass

    Disclosed · since 5 Oct 2026 · updated 5 Oct 2026 · CVE-2026-8505

    AI
  149. closed
    Langflow IBM Langflow OSS Authentication Bypass in Webhooks

    Disclosed · since 17 Jul 2026

    AI
  150. closed9.8
    Langflow CVE-2026-7803: IBM Langflow OSS flow node arbitrary code execution

    Disclosed · since 30 Jun 2026 · CVE-2026-7803

    AI
  151. closed9.8
    Langflow CVE-2026-7871: IBM Langflow OSS arbitrary code execution vulnerability

    Disclosed · since 30 Jun 2026 · CVE-2026-7871

    AI
  152. closed9.1
    Langflow CVE-2026-7874: IBM Langflow OSS Weak Key Derivation Vulnerability

    Disclosed · since 30 Jun 2026 · CVE-2026-7874

    AI
  153. closed9.9
    Langflow CVE-2026-7873: IBM Langflow OSS Remote Command Execution Vulnerability

    Disclosed · since 30 Jun 2026 · CVE-2026-7873

    AI
  154. closed9.1
    Langflow CVE-2026-7663: IBM Langflow OSS MCP Resource Access Vulnerability

    Disclosed · since 30 Jun 2026 · CVE-2026-7663

    AI
  155. closed7.1
    Langflow CVE-2026-10546: IBM Langflow OSS SSRF Vulnerability

    Disclosed · since 30 Jun 2026 · CVE-2026-10546

    AI
  156. closed8.2
    Langflow CVE-2026-10560: IBM Langflow OSS Missing Authentication Vulnerability

    Disclosed · since 30 Jun 2026 · CVE-2026-10560

    AI
  157. closed9.6
    Langflow CVE-2026-10140: IBM Langflow OSS voice mode shared-state flaw leads to cross-tenant API client reuse

    Disclosed · since 30 Jun 2026 · CVE-2026-10140

    AI
  158. closed10.0
    Langflow CVE-2026-10134: IBM Langflow OSS critical vulnerability enables secret exposure and remote code execution

    Disclosed · since 30 Jun 2026 · CVE-2026-10134

    AI
  159. closed8.5
    Langflow CVE-2026-10129: IBM Langflow OSS API request SSRF protection bypass

    Disclosed · since 30 Jun 2026 · CVE-2026-10129

    AI
  160. closed8.2
    Langflow CVE-2026-10564: IBM Langflow OSS SSRF vulnerability in components

    Disclosed · since 30 Jun 2026 · CVE-2026-10564

    AI
  161. closed9.8
    Langflow CVE-2026-7664: Improper authorization flaw in IBM Langflow OSS

    Disclosed · since 22 Jun 2026 · CVE-2026-7664

    AI
  162. closed5.3
    Langflow CVE-2026-12822: Code injection vulnerability in Langflow URL loader

    Disclosed · since 22 Jun 2026 · CVE-2026-12822

    AI
  163. closed9.9
    Langflow CVE-2026-10561: Langflow Unsandboxed PythonREPLComponent Execution

    Disclosed · since 6 Oct 2026 · updated 6 Oct 2026 · CVE-2026-10561

    AI
  164. closed7.5
    Langflow CVE-2026-55446: Langflow unauthenticated DoS vulnerability in file upload

    Disclosed · since 19 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55446

    AI
  165. closed9.6
    Langflow CVE-2026-55447: Langflow BaseFileComponent arbitrary file read and RCE vulnerability

    Disclosed · since 19 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55447

    AI
  166. closed6.1
    Langflow CVE-2026-55423: Langflow logout button fails to clear session tokens

    Disclosed · since 19 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55423

    AI
  167. closed9.3
    Langflow CVE-2026-55450: Langflow unauthenticated file upload leads to DoS and info leak

    Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55450

    AI
  168. closed8.8
    Langflow CVE-2026-33760: Langflow IDOR/BOLA in Monitor API

    Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-33760

    AI
  169. closed6.1
    Langflow CVE-2026-48520: Langflow arbitrary local or S3 file read vulnerability

    Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-48520

    AI
  170. closed6.5
    Langflow CVE-2026-42867: Langflow path traversal in Knowledge Bases API

    Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-42867

    AI
  171. closed9.6
    Langflow CVE-2026-48519: Langflow unauthenticated RCE in playgrounds

    Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-48519

    AI
  172. closed7.5
    Langflow CVE-2026-7787: Authentication bypass vulnerability in IBM Langflow OSS

    Disclosed · since 11 Jun 2026 · CVE-2026-7787

    AI
  173. closed5.4
    Langflow CVE-2026-3341: Server-side request forgery vulnerability in IBM Langflow Desktop

    Disclosed · since 11 Jun 2026 · CVE-2026-3341

    AI
  174. closed7.1
    Langflow CVE-2026-7528: Denial of service in IBM Langflow OSS

    Disclosed · since 27 May 2026 · CVE-2026-7528

    AI
  175. closed9.8
    Langflow CVE-2026-7524: RCE via symlink validation flaw in IBM Langflow OSS

    Disclosed · since 27 May 2026 · CVE-2026-7524

    AI
  176. closed9.6
    Langflow CVE-2026-42048: Langflow knowledge bases API vulnerable to path traversal

    Disclosed · since 5 May 2026 · updated 12 May 2026 · CVE-2026-42048

    AI
  177. closed6.3
    Langflow CVE-2026-7687: Langflow CodeParser Command Injection Vulnerability

    Disclosed · since 3 May 2026 · CVE-2026-7687

    AI
  178. closed8.8
    Langflow CVE-2026-7700: Langflow LambdaFilterComponent code injection vulnerability

    Disclosed · since 3 May 2026 · updated 5 Oct 2026 · CVE-2026-7700

    AI
  179. closed
    Langflow Langflow Smart Transform prompt injection and code execution vulnerability

    Disclosed · since 3 May 2026

    AI
  180. closed7.5
    Langflow CVE-2026-4503: IBM Langflow Desktop Insecure Direct Object Reference

    Disclosed · since 30 Apr 2026 · CVE-2026-4503

    AI
  181. closed6.5
    Langflow CVE-2026-6542: IBM Langflow OSS Unauthorized Data Access Vulnerability

    Disclosed · since 30 Apr 2026 · CVE-2026-6542

    AI
  182. closed6.5
    Langflow CVE-2026-3345: IBM Langflow Desktop Remote Directory Traversal

    Disclosed · since 30 Apr 2026 · CVE-2026-3345

    AI
  183. closed6.5
    Langflow CVE-2026-4502: IBM Langflow Desktop Directory Traversal Vulnerability

    Disclosed · since 30 Apr 2026 · CVE-2026-4502

    AI
  184. closed6.5
    Langflow CVE-2026-3340: IBM Langflow Desktop server-side request forgery

    Disclosed · since 30 Apr 2026 · CVE-2026-3340

    AI
  185. closed8.8
    Langflow CVE-2026-6543: IBM Langflow Desktop arbitrary command execution

    Disclosed · since 30 Apr 2026 · CVE-2026-6543

    AI
  186. closed6.4
    Langflow CVE-2026-3346: IBM Langflow Desktop stored cross-site scripting

    Disclosed · since 30 Apr 2026 · CVE-2026-3346

    AI
  187. closed7.3
    Langflow CVE-2026-6596: Unrestricted file upload vulnerability in langflow-ai langflow

    Disclosed · since 20 Apr 2026 · CVE-2026-6596

    AI
  188. closed3.5
    Langflow CVE-2026-6600: Cross-site scripting vulnerability in langflow-ai langflow frontend

    Disclosed · since 20 Apr 2026 · CVE-2026-6600

    AI
  189. closed2.7
    Langflow CVE-2026-6597: Langflow Information Leak via API Key Redaction

    Disclosed · since 20 Apr 2026 · CVE-2026-6597

    AI
  190. closed6.3
    Langflow CVE-2026-6599: Langflow MCP Configuration API Injection Vulnerability

    Disclosed · since 20 Apr 2026 · CVE-2026-6599

    AI
  191. closed4.3
    Langflow CVE-2026-6598: Langflow Cleartext Storage of Auth Settings

    Disclosed · since 20 Apr 2026 · CVE-2026-6598

    AI
  192. closed8.8
    Langflow IBM Langflow Desktop Insecure Deserialization Vulnerability

    Disclosed · since 8 Apr 2026 · CVE-2026-3357

    AI
  193. closed8.7
    Langflow CVE-2026-34046: Langflow IDOR Allows Unauthorized Flow Access

    Disclosed · since 27 Mar 2026 · CVE-2026-34046

    AI
  194. closed9.3
    Langflow CVE-2026-33873: Langflow Authenticated Code Execution in Agentic Assistant

    Disclosed · since 26 Mar 2026 · updated 27 Mar 2026 · CVE-2026-33873

    AI
  195. closed9.1
    Langflow CVE-2026-33475: Langflow Remote Shell Injection in CI/CD Workflows

    Disclosed · since 24 Mar 2026 · CVE-2026-33475

    AI
  196. closed7.5
    Langflow Langflow unauthenticated IDOR vulnerability on image downloads

    Disclosed · since 20 Mar 2026 · updated 24 Mar 2026 · CVE-2026-33484

    AI
  197. closed8.7
    Langflow Langflow profile picture endpoint path traversal vulnerability

    Disclosed · since 20 Mar 2026 · updated 24 Mar 2026 · CVE-2026-33497

    AI
  198. closed9.9
    Langflow CVE-2026-33309: Langflow Arbitrary File Write via v2 API

    Disclosed · since 19 Mar 2026 · updated 24 Mar 2026 · CVE-2026-33309

    AI
  199. closed7.1
    Langflow CVE-2026-33053: Langflow Missing Ownership Verification in API Key Deletion

    Disclosed · since 18 Mar 2026 · updated 20 Mar 2026 · CVE-2026-33053

    AI
  200. closed9.8
    Langflow CVE-2026-33017: Unauthenticated RCE in Langflow Public Flow Build

    Disclosed · since 17 Mar 2026 · updated 20 Mar 2026 · CVE-2026-33017

    AI
  201. closed9.8
    Langflow CVE-2026-27966: Langflow Remote Code Execution in CSV Agent

    Disclosed · since 27 Feb 2026 · updated 27 Feb 2026 · CVE-2026-27966

    AI
  202. closed7.1
    Langflow CVE-2026-0771: Langflow PythonFunction Code Injection Vulnerability

    Disclosed · since 23 Jan 2026 · CVE-2026-0771

    AI
  203. closed9.8
    Langflow CVE-2026-0768: Langflow Validate Endpoint Code Injection Vulnerability

    Disclosed · since 23 Jan 2026 · CVE-2026-0768

    AI
  204. closed9.8
    Langflow CVE-2026-0769: Langflow eval_custom_component_code RCE Vulnerability

    Disclosed · since 23 Jan 2026 · CVE-2026-0769

    AI
  205. closed7.5
    Langflow CVE-2026-0772: Langflow Disk Cache Deserialization RCE Vulnerability

    Disclosed · since 23 Jan 2026 · CVE-2026-0772

    AI
  206. closed8.9
    Langflow CVE-2026-0770: Langflow Remote Code Execution via validate_code

    Disclosed · since 23 Jan 2026 · CVE-2026-0770

    AI
  207. closed8.8
    Langflow CVE-2026-21445: Langflow Missing Authentication on Critical API Endpoints

    Disclosed · since 2 Jan 2026 · CVE-2026-21445

    AI
  208. closed7.1
    Langflow CVE-2025-68478: Arbitrary file creation vulnerability in Langflow

    Disclosed · since 19 Dec 2025 · CVE-2025-68478

    AI
  209. closed7.7
    Langflow CVE-2025-68477: SSRF vulnerability via API Request component in Langflow

    Disclosed · since 19 Dec 2025 · CVE-2025-68477

    AI
  210. closed9.4
    Langflow CVE-2025-34291: Langflow Chained Account Takeover and RCE

    Disclosed · since 5 Dec 2025 · updated 6 Dec 2025 · CVE-2025-34291

    AI
  211. closed8.8
    Langflow CVE-2025-57760: Langflow Privilege Escalation via CLI

    Disclosed · since 25 Aug 2025 · CVE-2025-57760

    AI
  212. closed9.8
    Langflow Langflow Vulnerable to Code Injection via Validate Code Endpoint

    Disclosed · since 7 Apr 2025 · CVE-2025-32375

    AI
  213. closed9.8
    Langflow CVE-2024-48061: Langflow Remote Code Execution Vulnerability

    Disclosed · since 5 Nov 2024 · updated 5 Nov 2024 · CVE-2024-48061

    AI
  214. closed9.8
    Langflow CVE-2024-42835: Langflow Remote Code Execution Vulnerability

    Disclosed · since 31 Oct 2024 · CVE-2024-42835

    AI
  215. closed5.1
    Langflow CVE-2024-9277: Langflow regular expression complexity vulnerability

    Disclosed · since 27 Sep 2024 · CVE-2024-9277

    AI
  216. closed8.8
    Langflow CVE-2024-7297: Privilege escalation vulnerability in Langflow

    Disclosed · since 30 Jul 2024 · CVE-2024-7297

    AI
  217. closed8.8
    Langflow CVE-2024-37014: Langflow remote code execution vulnerability

    Disclosed · since 10 Jun 2024 · CVE-2024-37014

    AI

Other incidents: research and unexploited reports · 1

  1. closed
    LangChain family RCE Vulnerabilities in LLM-Integrated Applications via Prompt Injection

    Research · since 27 Feb 2025

    AI

Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.