langflow
0 live · 125 on record · last incident 16 days ago
Records125
- closed9.8Langflow CVE-2026-93680: IBM Langflow OSS Authentication Bypass Vulnerability
Patch now · Disclosed · Patched · since 29 Oct 2026 · updated 2 Nov 2026 · CVE-2026-93680
AI - closed9.8Langflow CVE-2026-110186: IBM Langflow OSS Code Generation Vulnerability
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-110186
AI - closed9.9Langflow CVE-2026-107327: IBM Langflow OSS Remote Code Execution Vulnerability
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-107327
AI - closed8.8Langflow CVE-2026-110196: IBM Langflow OSS Remote Code Execution Vulnerability
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-110196
AI - closed8.8Langflow CVE-2026-110193: IBM Langflow OSS Agentic Assistant Command Execution Flaw
Patch now · Disclosed · Patched · since 29 Oct 2026 · CVE-2026-110193
AI - closed7.6Langflow CVE-2026-93678: IBM Langflow OSS Improper Authorization
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93678
AI - closed6.5Langflow CVE-2026-101329: IBM Langflow OSS Improper Access Control
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-101329
AI - closed8.5Langflow CVE-2026-93449: IBM Langflow OSS Arbitrary Code Execution
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93449
AI - closed8.8Langflow CVE-2026-88962: IBM Langflow OSS Arbitrary Code Execution
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-88962
AI - closed6.5Langflow CVE-2026-97671: IBM Langflow OSS Path Traversal Vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97671
AI - closed8.8Langflow CVE-2026-97655: IBM Langflow OSS Security Scanner Bypass Vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97655
AI - closed8.1Langflow CVE-2026-93445: IBM Langflow OSS Code Generation Vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93445
AI - closed7.7Langflow CVE-2026-101331: IBM Langflow OSS Credential Exposure Vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-101331
AI - closed9.8Langflow CVE-2026-93674: IBM Langflow OSS OS Command Execution Vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93674
AI - closed7.5Langflow CVE-2026-93443: IBM Langflow OSS Remote Code Execution Vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93443
AI - closed8.3Langflow CVE-2026-97680: IBM Langflow OSS improper access control vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97680
AI - closed8.8Langflow CVE-2026-97679: IBM Langflow OSS code injection vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97679
AI - closed8.1Langflow CVE-2026-97674: IBM Langflow OSS vulnerable to OS command injection
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97674
AI - closed7.5Langflow CVE-2026-93447: IBM Langflow OSS vulnerable to insecure deserialization
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93447
AI - closedLangflow Langflow SSRF Vulnerability in URL-Taking Components
Patch now · Disclosed · since 6 Oct 2026
AI - closed9.9Langflow Langflow OS Command Injection via MCP Stdio Server Configuration
Patch now · Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105697
AI - closed9.9Langflow Langflow Remote Code Execution via MCP Stdio Transport
Patch now · Exploited · since 5 Oct 2026 · updated 15 Oct 2026 · CVE-2026-105740
AI - closed5.4Langflow CVE-2026-105698: Langflow Cross-User Flow Access and Vertex Execution
Patch now · Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105698
AI - closed7.1Langflow CVE-2026-105741: Langflow IP Spoofing Bypass for Configuration Write
Patch now · Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105741
AI - closed8.8Langflow CVE-2026-51886: Code injection vulnerability in Langflow
Patch now · Disclosed · since 1 Oct 2026 · updated 5 Oct 2026 · CVE-2026-51886
AI - closed7.5Langflow CVE-2026-51888: Directory traversal flaw in Langflow
Patch now · Disclosed · since 1 Oct 2026 · CVE-2026-51888
AI - closed4.1Langflow CVE-2026-101861: Langflow Unsafe Eval Code Execution Vulnerability
Patch now · Disclosed · since 28 Sep 2026 · CVE-2026-101861
AI - closed5.4Langflow CVE-2026-17628: IBM Langflow OSS Improper Authentication Vulnerability
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-17628
AI - closed4.2Langflow CVE-2026-12763: Improper cache key isolation vulnerability in Langflow MCP Tools
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12763
AI - closed5.4Langflow CVE-2026-12766: Server-side request forgery vulnerability in Langflow OSS
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12766
AI - closed6.5Langflow CVE-2026-12767: Server-side request forgery vulnerability in Langflow OSS
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12767
AI - closed6.5Langflow CVE-2026-12765: Server-side request forgery vulnerability in Langflow OSS
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12765
AI - closed9.6Langflow CVE-2026-12944: IBM Langflow OSS Arbitrary Code Execution
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12944
AI - closed9.8Langflow CVE-2026-81204: Critical code injection vulnerability in IBM Langflow OSS
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81204
AI - closed8.8Langflow CVE-2026-78569: Code execution vulnerability in IBM Langflow OSS security scanner
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-78569
AI - closed8.8Langflow CVE-2026-79742: Arbitrary code execution in IBM Langflow OSS due to blocklist flaw
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-79742
AI - closed8.8Langflow CVE-2026-78571: Remote code execution vulnerability in IBM Langflow OSS
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-78571
AI - closed5.0Langflow CVE-2026-79723: Information disclosure vulnerability in IBM Langflow OSS
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-79723
AI - closed8.8Langflow CVE-2026-84889: IBM Langflow OSS arbitrary code execution via path traversal
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-84889
AI - closed9.8Langflow CVE-2026-79724: IBM Langflow OSS remote OS command execution flaw
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-79724
AI - closed8.6Langflow CVE-2026-81213: IBM Langflow OSS internal resource information disclosure
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81213
AI - closed8.8Langflow CVE-2026-81211: IBM Langflow OSS arbitrary Python code execution flaw
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81211
AI - closed8.8Langflow CVE-2026-81940: IBM Langflow OSS remote code execution vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81940
AI - closed8.8Langflow CVE-2026-78575: IBM Langflow OSS Command Execution via MCP Stdio Server
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-78575
AI - closed8.1Langflow CVE-2026-81268: IBM Langflow OSS API Key Session Expiration Flaw
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81268
AI - closed9.8Langflow CVE-2026-85025: IBM Langflow OSS Unauthenticated Code Execution via MCP Endpoints
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-85025
AI - closed8.8Langflow CVE-2026-76059: IBM Langflow OSS Static Security Scanner Bypass
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-76059
AI - closed6.5Langflow IBM Langflow OSS vulnerable to unauthorized file access
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-9225
AI - closed8.8Langflow IBM Langflow OSS vulnerable to arbitrary OS command execution
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81941
AI - closed6.1Langflow CVE-2026-8447: Stored XSS vulnerability in IBM Langflow OSS playground
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-8447
AI - closed8.8Langflow CVE-2026-19298: IBM Langflow OSS authorization bypass remote code execution
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19298
AI - closed5.0Langflow CVE-2026-17631: IBM Langflow OSS server-side request forgery vulnerability
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-17631
AI - closed6.5Langflow CVE-2026-17622: IBM Langflow OSS information disclosure via path traversal
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-17622
AI - closed4.9Langflow CVE-2026-17627: IBM Langflow OSS improper authorization workflow history injection
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-17627
AI - closed8.1Langflow CVE-2026-19303: IBM Langflow OSS arbitrary local file deletion vulnerability
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19303
AI - closed7.7Langflow CVE-2026-19304: IBM Langflow OSS URL parser discrepancy information disclosure
Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19304
AI - closedDeepSeek Threat Actor Uses DeepSeek-Powered Hermes Agent for Exploitation
Breaches & attacks · Exploited · since 7 May 2026
AI - closed7.5Langflow CVE-2026-18899: IBM Langflow OSS path traversal vulnerability
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18899
AI - closed8.8Langflow CVE-2026-18729: IBM Langflow OSS code generation control vulnerability
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18729
AI - closed6.4Langflow CVE-2026-19294: IBM Langflow OSS improper authorization vulnerability
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-19294
AI - closed8.2Langflow CVE-2026-18891: IBM Langflow OSS improper authentication vulnerability
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18891
AI - closed7.5Langflow CVE-2026-19875: IBM Langflow OSS missing authentication vulnerability
Patch now · Disclosed · since 19 Aug 2026 · CVE-2026-19875
AI - closed9.1Langflow CVE-2026-19297: IBM Langflow OSS authentication restriction vulnerability
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-19297
AI - closed8.5Langflow CVE-2026-17633: IBM Langflow OSS Authenticated Code Injection
Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-17633
AI - closed7.2Langflow CVE-2026-17630: IBM Langflow OSS Arbitrary Code Execution
Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-17630
AI - closed8.8Langflow CVE-2026-8478: IBM Langflow OSS Code Injection Vulnerability
Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-8478
AI - closed6.5Langflow CVE-2026-7657: IBM Langflow OSS SSRF Vulnerability
Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-7657
AI - closed9.1Langflow CVE-2026-9205: Langflow Weak Fernet Key Derivation via random.seed()
Patch now · Disclosed · since 5 Oct 2026 · updated 5 Oct 2026 · CVE-2026-9205
AI - closed7.1Langflow CVE-2026-12945: IBM Langflow OSS Build Job Manipulation Vulnerability
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-12945
AI - closed7.5Langflow CVE-2026-12942: IBM Langflow OSS Directory Traversal Vulnerability
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-12942
AI - closed9.8Langflow CVE-2026-12940: IBM Langflow OSS RCE via Environment Variable Injection
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-12940
AI - closed8.1Langflow CVE-2026-13444: IBM Langflow OSS Unauthorized Access to Vector Documents
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-13444
AI - closed6.5Langflow CVE-2026-10700: IBM Langflow OSS Broken Access Control in File Handling API
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-10700
AI - closed9.8Langflow CVE-2026-9202: IBM Langflow OSS Unauthenticated User Creation Vulnerability
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-9202
AI - closed8.8Langflow CVE-2026-7667: IBM Langflow OSS Arbitrary File Write Vulnerability
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-7667
AI - closed8.1Langflow CVE-2026-13448: IBM Langflow OSS Public Flow Build RCE Vulnerability
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-13448
AI - closed9.9Langflow CVE-2026-8481: IBM Langflow OSS Code Validation RCE Vulnerability
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-8481
AI - closed9.8Langflow CVE-2026-9103: IBM Langflow OSS Improper Authentication Vulnerability
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-9103
AI - closed8.1Langflow CVE-2026-13445: IBM Langflow OSS storage boundary violation in SaveToFile component
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-13445
AI - closed9.9Langflow CVE-2026-8859: IBM Langflow OSS path traversal allows arbitrary file write
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-8859
AI - closed9.9Langflow CVE-2026-8476: IBM Langflow OSS remote code execution via unsafe pickle deserialization
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-8476
AI - closed9.9Langflow CVE-2026-9135: IBM Langflow OSS code injection via ToolGuard dynamic fields
Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-9135
AI - closedLangflow IBM Langflow OSS Authentication Bypass in Webhooks
Patch now · Disclosed · since 17 Jul 2026
AI - closedLangflow LLM-Driven Ransomware Operator JADEPUFFER Targeted Production Database
Breaches & attacks · Exploited · since 1 Jul 2026
AI - closed9.1Langflow CVE-2026-7874: IBM Langflow OSS Weak Key Derivation Vulnerability
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-7874
AI - closed9.9Langflow CVE-2026-7873: IBM Langflow OSS Remote Command Execution Vulnerability
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-7873
AI - closed9.1Langflow CVE-2026-7663: IBM Langflow OSS MCP Resource Access Vulnerability
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-7663
AI - closed7.1Langflow CVE-2026-10546: IBM Langflow OSS SSRF Vulnerability
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10546
AI - closed8.2Langflow CVE-2026-10560: IBM Langflow OSS Missing Authentication Vulnerability
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10560
AI - closed9.6Langflow CVE-2026-10140: IBM Langflow OSS voice mode shared-state flaw leads to cross-tenant API client reuse
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10140
AI - closed10.0Langflow CVE-2026-10134: IBM Langflow OSS critical vulnerability enables secret exposure and remote code execution
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10134
AI - closed9.6Langflow CVE-2026-55447: Langflow BaseFileComponent arbitrary file read and RCE vulnerability
Patch now · Disclosed · since 19 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55447
AI - closed8.4Langflow Langflow IDOR Vulnerability Allows Unauthorized Flow Execution
Patch now · Exploited · since 23 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55255
AI - closed9.3Langflow CVE-2026-55450: Langflow unauthenticated file upload leads to DoS and info leak
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55450
AI - closed6.5Langflow CVE-2026-42867: Langflow path traversal in Knowledge Bases API
Patch now · Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-42867
AI - closed9.6Langflow CVE-2026-48519: Langflow unauthenticated RCE in playgrounds
Patch now · Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-48519
AI - closed7.5Langflow CVE-2026-7787: Authentication bypass vulnerability in IBM Langflow OSS
Patch now · Disclosed · since 11 Jun 2026 · CVE-2026-7787
AI - closed5.4Langflow CVE-2026-3341: Server-side request forgery vulnerability in IBM Langflow Desktop
Patch now · Disclosed · since 11 Jun 2026 · CVE-2026-3341
AI - closed9.6Langflow CVE-2026-42048: Langflow knowledge bases API vulnerable to path traversal
Patch now · Disclosed · since 5 May 2026 · updated 12 May 2026 · CVE-2026-42048
AI - closed6.3Langflow CVE-2026-7687: Langflow CodeParser Command Injection Vulnerability
Patch now · Disclosed · since 3 May 2026 · CVE-2026-7687
AI - closed8.8Langflow CVE-2026-7700: Langflow LambdaFilterComponent code injection vulnerability
Patch now · Disclosed · since 3 May 2026 · updated 5 Oct 2026 · CVE-2026-7700
AI - closedLangflow Langflow Smart Transform prompt injection and code execution vulnerability
Patch now · Disclosed · since 3 May 2026
AI - closed7.5Langflow CVE-2026-4503: IBM Langflow Desktop Insecure Direct Object Reference
Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-4503
AI - closed6.5Langflow CVE-2026-6542: IBM Langflow OSS Unauthorized Data Access Vulnerability
Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-6542
AI - closed6.5Langflow CVE-2026-3345: IBM Langflow Desktop Remote Directory Traversal
Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-3345
AI - closed6.5Langflow CVE-2026-4502: IBM Langflow Desktop Directory Traversal Vulnerability
Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-4502
AI - closed6.5Langflow CVE-2026-3340: IBM Langflow Desktop server-side request forgery
Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-3340
AI - closed8.8Langflow CVE-2026-6543: IBM Langflow Desktop arbitrary command execution
Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-6543
AI - closed6.4Langflow CVE-2026-3346: IBM Langflow Desktop stored cross-site scripting
Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-3346
AI - closed7.3Langflow CVE-2026-6596: Unrestricted file upload vulnerability in langflow-ai langflow
Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6596
AI - closed3.5Langflow CVE-2026-6600: Cross-site scripting vulnerability in langflow-ai langflow frontend
Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6600
AI - closed8.8Langflow IBM Langflow Desktop Insecure Deserialization Vulnerability
Patch now · Disclosed · since 8 Apr 2026 · CVE-2026-3357
AI - closed8.7Langflow CVE-2026-34046: Langflow IDOR Allows Unauthorized Flow Access
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-34046
AI - closed9.3Langflow CVE-2026-33873: Langflow Authenticated Code Execution in Agentic Assistant
Patch now · Disclosed · since 26 Mar 2026 · updated 27 Mar 2026 · CVE-2026-33873
AI - closed9.9Langflow CVE-2026-33309: Langflow Arbitrary File Write via v2 API
Patch now · Disclosed · since 19 Mar 2026 · updated 24 Mar 2026 · CVE-2026-33309
AI - closed7.1Langflow CVE-2026-33053: Langflow Missing Ownership Verification in API Key Deletion
Patch now · Disclosed · since 18 Mar 2026 · updated 20 Mar 2026 · CVE-2026-33053
AI - closed9.8Langflow CVE-2026-33017: Unauthenticated RCE in Langflow Public Flow Build
Patch now · Disclosed · since 17 Mar 2026 · updated 20 Mar 2026 · CVE-2026-33017
AI - closed9.8Langflow CVE-2026-27966: Langflow Remote Code Execution in CSV Agent
Patch now · Disclosed · since 27 Feb 2026 · updated 27 Feb 2026 · CVE-2026-27966
AI - closed8.8Langflow CVE-2026-21445: Langflow Missing Authentication on Critical API Endpoints
Patch now · Disclosed · since 2 Jan 2026 · CVE-2026-21445
AI - closed7.1Langflow CVE-2025-68478: Arbitrary file creation vulnerability in Langflow
Patch now · Disclosed · since 19 Dec 2025 · CVE-2025-68478
AI - closed7.7Langflow CVE-2025-68477: SSRF vulnerability via API Request component in Langflow
Patch now · Disclosed · since 19 Dec 2025 · CVE-2025-68477
AI - closed9.8Langflow CVE-2024-48061: Langflow Remote Code Execution Vulnerability
Patch now · Disclosed · since 5 Nov 2024 · updated 5 Nov 2024 · CVE-2024-48061
AI - closed9.8Langflow CVE-2024-42835: Langflow Remote Code Execution Vulnerability
Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-42835
AI - closed8.8Langflow CVE-2024-7297: Privilege escalation vulnerability in Langflow
Patch now · Disclosed · since 30 Jul 2024 · CVE-2024-7297
AI - closed8.8Langflow CVE-2024-37014: Langflow remote code execution vulnerability
Patch now · Disclosed · since 10 Jun 2024 · CVE-2024-37014
AI