Read the docs

Langflow

Records237All Threatist records
Exploited (KEV)6In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high107CVSS 7.0–8.9

Exploited now

Langflow records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2026-00553 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Priority CRITICAL 100KEV 2026-07-21TI-2026-39928 Langflow Authorization Bypass Through User-Controlled Key Vulnerability Priority CRITICAL 96KEV 2026-07-07TI-2025-24427 Langflow Origin Validation Error Vulnerability Priority CRITICAL 100KEV 2026-05-21TI-2026-25463 Langflow Code Injection Vulnerability Priority CRITICAL 99KEV 2026-03-25TI-2025-02845 Langflow Missing Authentication Vulnerability Priority CRITICAL 100KEV 2025-05-05

Components

Products in the NVD configurations · select one to filter the records
Langflow 217 records CRITICAL Langflow Desktop 7 records MEDIUM Langflow-base 1 record MEDIUM

Records

217 records in Langflow · all components

TI-2026-08085 CVE-2026-9198 · GHSA-5wm9-vgmg-cjv6

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

Priority CRITICAL 100KEV

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.28658 Published 2026-07-17 No fix listed CWE-94
TI-2025-24427 CVE-2025-34291 · GHSA-577h-p2hh-v4mv

Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

Priority CRITICAL 100KEV

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.93216 Published 2025-12-05 Fixed in 1.7.0 CWE-346
TI-2026-39928 CVE-2026-55255 · GHSA-qrpv-q767-xqq2

Authorization bypass in langflow

Priority CRITICAL 96KEV

Langflow is a tool for building and deploying AI-powered agents and workflows.

CVSS 3.1HIGH 8.4 Network Low privileges No interaction EPSS 0.00887 Published 2026-06-23 Fixed in 1.9.1 CWE-639
TI-2026-22309 CVE-2026-27966 · GHSA-3645-fxcv-hqr4

Langflow has Remote Code Execution in CSV Agent

Priority HIGH 82

Langflow is a tool for building and deploying AI-powered agents and workflows.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.35246 Published 2026-02-26 Fixed in 1.8.0 CWE-94
TI-2026-25871 CVE-2026-33475

Langflow GitHub Actions Shell Injection

Priority HIGH 80

Langflow is a tool for building and deploying AI-powered agents and workflows.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03154 Published 2026-03-24 Fixed in 1.9.0 CWE-74
TI-2026-25720 CVE-2026-33309 · GHSA-g2j9-7rj2-gm6c

Langflow has an Arbitrary File Write (RCE) via v2 API

Priority HIGH 76

Langflow is a tool for building and deploying AI-powered agents and workflows.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.13467 Published 2026-03-24 Fixed in 1.9.0 CWE-22
TI-2024-06759 CVE-2024-7297 · GHSA-6j6g-j4qm-m9jf

Langflow Privilege Escalation

Priority HIGH 73

Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged attacker to gain super admin privileges by performing a mass assignment request on the '/api/v1/use…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.21183 Published 2024-07-30 Fixed in 1.0.13 CWE-913
TI-2026-00551 CVE-2026-0768 · GHSA-x5pr-rvjj-j6qm

Code injection in Langflow

Priority HIGH 71

Langflow code Code Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.2805 Published 2026-01-23 No fix listed CWE-94
Load more
Open these records in search →