Product by IBM
Langflow Desktop
48 known vulnerabilities in Langflow Desktop (IBM), 0 of them actively exploited (CISA KEV).
Key figures
48
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-12940 | IBM Langflow OSS: OS Command Injection | 9.8 | |
| High | CVE-2026-17632 | IBM Langflow OSS: Code Injection | 8.8 | |
| High | CVE-2026-17623 | Langflow is affected OS Command Injection in Model Context Protocol features | 8.8 | |
| Critical | CVE-2026-12946 | Remote Code Execution in CUGA Component CodeAgent | 9.9 | |
| Critical | CVE-2026-13448 | IBM Langflow OSS: Incomplete List of Disallowed Inputs | 9.8 | |
| High | CVE-2026-17630 | Langflow is affected by security vulnerabilities in Model Context Protocol features | 8.8 | |
| High | CVE-2026-17633 | IBM Langflow OSS: Code Injection | 8.8 | |
| High | CVE-2026-17624 | IBM Langflow OSS: Code Injection | 8.8 | |
| Critical | CVE-2026-19297 | Insufficient Authentication Brute Force Protection on Login Endpoint | 9.1 | |
| Critical | CVE-2026-13435 | Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure | 9.9 | |
| High | CVE-2026-8182 | IBM Langflow OSS: Code Injection | 8.8 | |
| High | CVE-2026-8478 | IBM Langflow OSS: Code Injection | 8.8 | |
| High | CVE-2026-14499 | IBM Langflow OSS: OS Command Injection | 8.8 | |
| High | CVE-2026-17625 | Langflow is affected by OS Command Injection in Model Context Protocol features | 7.2 | |
| High | CVE-2026-9196 | IBM Langflow OSS: Code Injection | 8.8 | |
| High | CVE-2026-12942 | IBM Langflow OSS: Path Traversal | 7.5 | |
| High | CVE-2026-8183 | IBM Langflow OSS: Path Traversal | 7.7 | |
| Critical | CVE-2026-13446 | IBM Langflow OSS: Use of Hard-coded Credentials | 9.8 | |
| High | CVE-2026-19875 | IBM Langflow OSS: Missing Authentication for Critical Function | 7.5 | |
| High | CVE-2026-17626 | Langflow is affected by security vulnerabilities in Model Context Protocol features | 8.8 | |
| High | CVE-2026-9077 | IBM Langflow OSS: Reliance on Untrusted Inputs in a Security Decision | 8.5 | |
| High | CVE-2026-8506 | IBM Langflow Desktop: security vulnerability | — | |
| High | CVE-2026-9131 | IBM Langflow Desktop: security vulnerability | — | |
| High | CVE-2026-17629 | IBM Langflow Desktop: security vulnerability | — | |
| Critical | CVE-2026-9205 | Langflow is affected by weaknesses in secret handling and sensitive configuration access | 9.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28sans-atrisk-mail,