Product by Langflow-ai
Langflow-base
7 known vulnerabilities in Langflow-base (Langflow-ai), 1 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-3248 | Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code In CISA KEVRansomwarealso in 2 other products | 9.8 | |
| Critical | CVE-2026-21445 | Langflow Missing Authentication on Critical API Endpoints | 9.1 | |
| Critical | CVE-2026-105697 | Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | 9.9 | |
| High | CVE-2026-34046 | Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check | 8.8 | |
| High | CVE-2025-57760 | Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation | 8.8 | |
| Medium | CVE-2026-105698 | Langflow: Authorization Bypass Through User-Controlled Key | 5.4 | |
| High | CVE-2026-6596 | langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload | 7.3 |
News
- The AI app builder your team trusts has a root-level backdoorcsoonline,
- AI-powered breaches provide wake-up call for incident responsecsoonline,
- Simulated Cyberattack on US Water Challenges Insurance Execssans-newsbites-mail,
- This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransomcsoonline,