Langflow

Vulnerability activity for Langflow: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 7
Critical (CVSS 9+): 5
Exploited (CISA KEV): 4
With exploit code: 6

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

9.8CriticalJul 21, 2026LangflowCVE-2026-0770Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. Added to KEV Jul 21, 2026Exploited63% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
8.4HighJul 7, 2026Langflow Auth bypass / access controlCVE-2026-55255Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.Added to KEV Jul 7, 2026ExploitedExploit code
9.4CriticalMay 21, 2026Langflow Auth bypass / access controlCVE-2025-34291Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. This could allow the attacker to execute arbitrary code and achieve full system compromise via obtained tokens that permit access to authenticated endpoints.Added to KEV May 21, 2026Exploited93% likelyExploit codeNucleiDetection
9.3CriticalMar 25, 2026Langflow Code / command injectionCVE-2026-33017Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.Added to KEV Mar 25, 2026Exploited25% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
9.8CriticalApr 7, 2025Langflow Auth bypass / access controlCVE-2025-3248Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.Added to KEV May 5, 2025 · 27 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

Recent

9.8CriticalJul 21, 2026LangflowCVE-2026-0770Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. Exploited63% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
8.4HighJul 7, 2026Langflow Auth bypass / access controlCVE-2026-55255Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.ExploitedExploit code
9.4CriticalMay 21, 2026Langflow Auth bypass / access controlCVE-2025-34291Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. This could allow the attacker to execute arbitrary code and achieve full system compromise via obtained tokens that permit access to authenticated endpoints.Exploited93% likelyExploit codeNucleiDetection
5.3MediumMar 27, 2026langflow Auth bypass / access controlCVE-2026-5022The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download images belonging to any flow by knowing (or guessing) the flow ID and file name.
9.3CriticalMar 25, 2026Langflow Code / command injectionCVE-2026-33017Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.Exploited25% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
9.8CriticalJan 23, 2026Langflow Code / command injectionCVE-2026-0769Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the imple41% likelyMetasploit
9.8CriticalJan 23, 2026Langflow Code / command injectionCVE-2026-0768Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code parame23% likelyMetasploit · NucleiDetection
9.8CriticalApr 7, 2025Langflow Auth bypass / access controlCVE-2025-3248Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.Exploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

See every Langflow entry on the dashboard.