Product by Langflow-ai
Langflow
42 known vulnerabilities in Langflow (Langflow-ai), 3 of them actively exploited (CISA KEV).
Key figures
42
Vulnerabilities
3
Actively exploited (KEV)
1
Used by ransomware
14
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-3248 | Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2026-33017 | Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2026-55255 | Langflow Authorization Bypass Through User-Controlled Key Vulnerability In CISA KEValso in 2 other products | 8.4 | |
| Critical | CVE-2026-27966 | Langflow has Remote Code Execution in CSV Agent | 9.8 | |
| Critical | CVE-2026-33309 | Langflow has an Arbitrary File Write (RCE) via v2 API | 10.0 | |
| High | CVE-2026-5027 | Langflow - Path Traversal Arbitrary File Write via upload_user_file | 8.8 | |
| Critical | CVE-2026-21445 | Langflow Missing Authentication on Critical API Endpoints | 9.1 | |
| High | CVE-2026-33497 | Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading | 7.5 | |
| Critical | CVE-2026-42048 | Langflow: Path Traversal in Langflow Knowledge Bases API | 9.6 | |
| Critical | CVE-2026-33475 | Langflow GitHub Actions Shell Injection | 9.1 | |
| High | CVE-2026-33484 | Langflow has Unauthenticated IDOR on Image Downloads | 7.5 | |
| High | CVE-2025-68477 | Langflow vulnerable to Server-Side Request Forgery | 7.7 | |
| High | CVE-2025-68478 | Langflow Vulnerable to External Control of File Name or Path | 7.1 | |
| Critical | CVE-2026-105740 | Langflow: OS Command Injection | 9.9 | |
| Medium | CVE-2026-7687 | Langflow: Command Injection | 6.3 | |
| Critical | CVE-2026-33873 | Langflow has Authenticated Code Execution in Agentic Assistant Validation | 9.9 | |
| Critical | CVE-2026-105697 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | 9.9 | |
| Critical | CVE-2026-55450 | Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak | 9.3 | |
| Critical | CVE-2026-48519 | Langflow: Unauthenticated RCE in Shareable Playgrounds | 9.6 | |
| Critical | CVE-2026-55447 | Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit | 9.6 | |
| High | CVE-2026-33760 | Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints | 8.8 | |
| High | CVE-2026-55446 | Langflow: Unauthenticated DoS through multipart form boundary file upload | 7.5 | |
| High | CVE-2026-34046 | Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check | 8.8 | |
| High | CVE-2025-57760 | Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation | 8.8 | |
| High | CVE-2026-105699 | Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers | — |
News
- Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attemptsthehackernews,
- The AI app builder your team trusts has a root-level backdoorcsoonline,
- AI-powered breaches provide wake-up call for incident responsecsoonline,
- Simulated Cyberattack on US Water Challenges Insurance Execssans-newsbites-mail,
- This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransomcsoonline,
- Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpointsthehackernews,