GCD AI RADAR
products/langflow

Langflow

Filed as: Langflow OSS, IBM Langflow OSS, langflow, IBM Langflow Desktop, Langflow Desktop

Records
209
Disclosed CVEs
202
Exploited (sev 3–4)
6
CISA KEV flagged
3

Newest record 2026-10-07 · 202 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Patch now: confirmed exploitation or KEV · 6

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

  1. 2026-10-05
    CVE-2026-105740
    Langflow Remote Code Execution via MCP Stdio Transport
    3 Exploitedrce · langflow · mcp
    record AIR-2026-0241NVD ↗
  2. 2026-08-30
    Threat Actor Uses DeepSeek-Powered Hermes Agent for Exploitation
    3 Exploiteddeepseek · hermes-agent · langflow · n8n
    record AIR-2026-0363MITRE ATLAS ↗
  3. 2026-07-17
    CVE-2026-9198
    CVE-2026-9198: IBM Langflow OSS unauthenticated RCE vulnerability
    3 Exploitedcisa kevrce
    record AIR-2026-1200NVD ↗
  4. 2026-07-01
    LLM-Driven Ransomware Operator JADEPUFFER Targeted Production Database
    3 Exploitedransomware · jadepuffer · agentic-threat · langflow
    record AIR-2026-0370AI Incident Database ↗
  5. 2026-06-19
    CVE-2026-55255
    Langflow IDOR Vulnerability Allows Unauthorized Flow Execution
    3 Exploitedcisa kevlangflow · idor
    record AIR-2026-0026GitHub Advisory Database ↗
  6. 2025-04-07
    CVE-2025-3248
    CVE-2025-3248: Langflow Code Injection Vulnerability
    3 Exploitedcisa kevcode-injection
    record AIR-2025-0006NVD ↗

Disclosures by month · last 24 months

Nov ’24198 disclosed · peak 42 in Sep ’26Oct ’26

Disclosed CVEs, no confirmed exploitation · 202

  1. 2026-10-07
    CVE-2026-93675
    CVE-2026-93675: IBM Langflow OSS dependency confusion vulnerability
    2 Discloseddependency_confusion · infra_vuln
    record AIR-2026-0284NVD ↗
  2. 2026-10-07
    CVE-2026-104335
    CVE-2026-104335: IBM Langflow OSS access control vulnerability
    2 Disclosedrce · infra_vuln
    record AIR-2026-0283NVD ↗
  3. 2026-10-07
    CVE-2026-97678
    CVE-2026-97678: IBM Langflow OSS input validation vulnerability
    2 Disclosedrce · infra_vuln
    record AIR-2026-0282NVD ↗
  4. 2026-10-07
    CVE-2026-97673
    CVE-2026-97673: IBM Langflow OSS input validation vulnerability
    2 Disclosedrce · infra_vuln
    record AIR-2026-0281NVD ↗
  5. 2026-10-07
    CVE-2026-104334
    CVE-2026-104334: IBM Langflow OSS remote code execution vulnerability
    2 Disclosedrce · infra_vuln
    record AIR-2026-0280NVD ↗
  6. 2026-10-07
    CVE-2026-93678
    CVE-2026-93678: IBM Langflow OSS Improper Authorization
    2 Disclosedauthorization · langflow
    record AIR-2026-0279NVD ↗
  7. 2026-10-07
    CVE-2026-101329
    CVE-2026-101329: IBM Langflow OSS Improper Access Control
    2 Disclosedaccess-control · langflow
    record AIR-2026-0278NVD ↗
  8. 2026-10-07
    CVE-2026-93449
    CVE-2026-93449: IBM Langflow OSS Arbitrary Code Execution
    2 Disclosedrce · langflow
    record AIR-2026-0277NVD ↗
  9. 2026-10-07
    CVE-2026-88962
    CVE-2026-88962: IBM Langflow OSS Arbitrary Code Execution
    2 Disclosedrce · langflow
    record AIR-2026-0276NVD ↗
  10. 2026-10-07
    CVE-2026-97671
    CVE-2026-97671: IBM Langflow OSS Path Traversal Vulnerability
    2 Disclosedpath-traversal · langflow
    record AIR-2026-0275NVD ↗
  11. 2026-10-07
    CVE-2026-97655
    CVE-2026-97655: IBM Langflow OSS Security Scanner Bypass Vulnerability
    2 Disclosedrce · langflow
    record AIR-2026-0274NVD ↗
  12. 2026-10-07
    CVE-2026-93445
    CVE-2026-93445: IBM Langflow OSS Code Generation Vulnerability
    2 Disclosedrce · langflow
    record AIR-2026-0273NVD ↗
  13. 2026-10-07
    CVE-2026-101331
    CVE-2026-101331: IBM Langflow OSS Credential Exposure Vulnerability
    2 Disclosedinfo-disclosure · langflow
    record AIR-2026-0272NVD ↗
  14. 2026-10-07
    CVE-2026-93674
    CVE-2026-93674: IBM Langflow OSS OS Command Execution Vulnerability
    2 Disclosedrce · langflow
    record AIR-2026-0271NVD ↗
  15. 2026-10-07
    CVE-2026-93443
    CVE-2026-93443: IBM Langflow OSS Remote Code Execution Vulnerability
    2 Disclosedrce · langflow
    record AIR-2026-0270NVD ↗
  16. 2026-10-07
    CVE-2026-93677
    CVE-2026-93677: IBM Langflow OSS sensitive information exposure
    2 Disclosedinformation-exposure
    record AIR-2026-0269NVD ↗
  17. 2026-10-07
    CVE-2026-93679
    CVE-2026-93679: IBM Langflow OSS denial of service vulnerability
    2 Discloseddos · resource-consumption
    record AIR-2026-0268NVD ↗
  18. 2026-10-07
    CVE-2026-103360
    CVE-2026-103360: IBM Langflow OSS path limitation vulnerability
    2 Disclosedpath-traversal · information-disclosure
    record AIR-2026-0267NVD ↗
  19. 2026-10-07
    CVE-2026-93448
    CVE-2026-93448: IBM Langflow OSS path traversal information disclosure
    2 Disclosedpath-traversal · information-disclosure
    record AIR-2026-0266NVD ↗
  20. 2026-10-07
    CVE-2026-97676
    CVE-2026-97676: IBM Langflow OSS remote code execution vulnerability
    2 Disclosedrce · sandbox-escape
    record AIR-2026-0265NVD ↗
  21. 2026-10-07
    CVE-2026-97680
    CVE-2026-97680: IBM Langflow OSS improper access control vulnerability
    2 Disclosedaccess-control · langflow
    record AIR-2026-0264NVD ↗
  22. 2026-10-07
    CVE-2026-97679
    CVE-2026-97679: IBM Langflow OSS code injection vulnerability
    2 Disclosedcode-injection · langflow
    record AIR-2026-0263NVD ↗
  23. 2026-10-07
    CVE-2026-97674
    CVE-2026-97674: IBM Langflow OSS vulnerable to OS command injection
    2 Disclosedcommand-injection · langflow
    record AIR-2026-0262NVD ↗
  24. 2026-10-07
    CVE-2026-93447
    CVE-2026-93447: IBM Langflow OSS vulnerable to insecure deserialization
    2 Discloseddeserialization · langflow
    record AIR-2026-0261NVD ↗
  25. 2026-10-06
    Langflow SSRF Vulnerability in URL-Taking Components
    2 Disclosedghsa-j8f7-x8jm-wmm4 · ssrf · langflow
    record AIR-2026-0250GitHub Advisory Database ↗
  26. 2026-10-05
    CVE-2026-105699
    CVE-2026-105699: Langflow Authenticated Cross-Project File Disclosure
    2 Disclosedmcp · file-disclosure
    record AIR-2026-0245NVD ↗
  27. 2026-10-05
    CVE-2026-105697
    Langflow OS Command Injection via MCP Stdio Server Configuration
    2 Disclosedcommand-injection · langflow
    record AIR-2026-0244NVD ↗
  28. 2026-10-05
    CVE-2026-105698
    CVE-2026-105698: Langflow Cross-User Flow Access and Vertex Execution
    2 Disclosedaccess-control · langflow
    record AIR-2026-0234NVD ↗
  29. 2026-10-05
    CVE-2026-105741
    CVE-2026-105741: Langflow IP Spoofing Bypass for Configuration Write
    2 Disclosedip-spoofing · langflow
    record AIR-2026-0231NVD ↗
  30. 2026-10-01
    CVE-2026-51886
    CVE-2026-51886: Code injection vulnerability in Langflow
    2 Disclosedremote-code-execution · langflow
    record AIR-2026-0222NVD ↗
  31. 2026-10-01
    CVE-2026-51888
    CVE-2026-51888: Directory traversal flaw in Langflow
    2 Discloseddirectory-traversal · langflow
    record AIR-2026-0221NVD ↗
  32. 2026-09-28
    CVE-2026-101861
    CVE-2026-101861: Langflow Unsafe Eval Code Execution Vulnerability
    2 Disclosedlangflow · rce · eval
    record AIR-2026-0216NVD ↗
  33. 2026-09-14
    CVE-2026-17628
    CVE-2026-17628: IBM Langflow OSS Improper Authentication Vulnerability
    2 Disclosedlangflow · infra_vuln
    record AIR-2026-1384NVD ↗
  34. 2026-09-14
    CVE-2026-12763
    CVE-2026-12763: Improper cache key isolation vulnerability in Langflow MCP Tools
    2 Disclosedmcp · langflow · cache-isolation
    record AIR-2026-1383NVD ↗
  35. 2026-09-14
    CVE-2026-12766
    CVE-2026-12766: Server-side request forgery vulnerability in Langflow OSS
    2 Disclosedssrf · langflow
    record AIR-2026-1382NVD ↗
  36. 2026-09-14
    CVE-2026-12767
    CVE-2026-12767: Server-side request forgery vulnerability in Langflow OSS
    2 Disclosedssrf · langflow
    record AIR-2026-1381NVD ↗
  37. 2026-09-14
    CVE-2026-12765
    CVE-2026-12765: Server-side request forgery vulnerability in Langflow OSS
    2 Disclosedssrf · langflow
    record AIR-2026-1380NVD ↗
  38. 2026-09-14
    CVE-2026-12944
    CVE-2026-12944: IBM Langflow OSS Arbitrary Code Execution
    2 Disclosedrce · langflow
    record AIR-2026-1378NVD ↗
  39. 2026-09-10
    CVE-2026-81265
    CVE-2026-81265: IBM Langflow OSS security vulnerability
    2 Disclosedinfra_vuln
    record AIR-2026-1371NVD ↗
  40. 2026-09-10
    CVE-2026-79725
    CVE-2026-79725: IBM Langflow OSS arbitrary file read vulnerability
    2 Disclosedinfra_vuln
    record AIR-2026-1369NVD ↗
  41. 2026-09-10
    CVE-2026-81204
    CVE-2026-81204: Critical code injection vulnerability in IBM Langflow OSS
    2 Disclosedlangflow · rce
    record AIR-2026-1368NVD ↗
  42. 2026-09-10
    CVE-2026-78569
    CVE-2026-78569: Code execution vulnerability in IBM Langflow OSS security scanner
    2 Disclosedlangflow · rce
    record AIR-2026-1367NVD ↗
  43. 2026-09-10
    CVE-2026-79742
    CVE-2026-79742: Arbitrary code execution in IBM Langflow OSS due to blocklist flaw
    2 Disclosedlangflow · rce
    record AIR-2026-1366NVD ↗
  44. 2026-09-10
    CVE-2026-78571
    CVE-2026-78571: Remote code execution vulnerability in IBM Langflow OSS
    2 Disclosedlangflow · rce
    record AIR-2026-1365NVD ↗
  45. 2026-09-10
    CVE-2026-79723
    CVE-2026-79723: Information disclosure vulnerability in IBM Langflow OSS
    2 Disclosedlangflow
    record AIR-2026-1364NVD ↗
  46. 2026-09-10
    CVE-2026-84889
    CVE-2026-84889: IBM Langflow OSS arbitrary code execution via path traversal
    2 Disclosedpath-traversal · langflow
    record AIR-2026-1363NVD ↗
  47. 2026-09-10
    CVE-2026-79724
    CVE-2026-79724: IBM Langflow OSS remote OS command execution flaw
    2 Disclosedcommand-injection · langflow
    record AIR-2026-1362NVD ↗
  48. 2026-09-10
    CVE-2026-81213
    CVE-2026-81213: IBM Langflow OSS internal resource information disclosure
    2 Disclosedssrf · langflow
    record AIR-2026-1361NVD ↗
  49. 2026-09-10
    CVE-2026-81211
    CVE-2026-81211: IBM Langflow OSS arbitrary Python code execution flaw
    2 Disclosedrce · langflow
    record AIR-2026-1360NVD ↗
  50. 2026-09-10
    CVE-2026-81940
    CVE-2026-81940: IBM Langflow OSS remote code execution vulnerability
    2 Disclosedrce · langflow
    record AIR-2026-1359NVD ↗
  51. 2026-09-10
    CVE-2026-78575
    CVE-2026-78575: IBM Langflow OSS Command Execution via MCP Stdio Server
    2 Disclosedlangflow · mcp
    record AIR-2026-1358NVD ↗
  52. 2026-09-10
    CVE-2026-81268
    CVE-2026-81268: IBM Langflow OSS API Key Session Expiration Flaw
    2 Disclosedlangflow
    record AIR-2026-1357NVD ↗
  53. 2026-09-10
    CVE-2026-85025
    CVE-2026-85025: IBM Langflow OSS Unauthenticated Code Execution via MCP Endpoints
    2 Disclosedlangflow · mcp
    record AIR-2026-1356NVD ↗
  54. 2026-09-10
    CVE-2026-76059
    CVE-2026-76059: IBM Langflow OSS Static Security Scanner Bypass
    2 Disclosedlangflow · rce
    record AIR-2026-1355NVD ↗
  55. 2026-09-10
    CVE-2026-9225
    IBM Langflow OSS vulnerable to unauthorized file access
    2 Disclosedlangflow · path-traversal
    record AIR-2026-1353NVD ↗
  56. 2026-09-10
    CVE-2026-81941
    IBM Langflow OSS vulnerable to arbitrary OS command execution
    2 Disclosedlangflow · remote-code-execution
    record AIR-2026-1352NVD ↗
  57. 2026-09-04
    CVE-2026-8447
    CVE-2026-8447: Stored XSS vulnerability in IBM Langflow OSS playground
    2 Disclosedxss · langflow
    record AIR-2026-1344NVD ↗
  58. 2026-09-04
    CVE-2026-19305
    CVE-2026-19305 in IBM Langflow OSS features severe server-side request forgery flaw
    2 Disclosedssrf
    record AIR-2026-1343NVD ↗
  59. 2026-09-04
    CVE-2026-19299
    CVE-2026-19299 in IBM Langflow OSS permits path traversal leading to information disclosure
    2 Disclosedpathtraversal
    record AIR-2026-1342NVD ↗
  60. 2026-09-04
    CVE-2026-19301
    CVE-2026-19301 in IBM Langflow OSS enables server-side request forgery for data access
    2 Disclosedssrf
    record AIR-2026-1341NVD ↗
  61. 2026-09-04
    CVE-2026-19300
    CVE-2026-19300 in IBM Langflow OSS exposes sensitive credentials via incomplete scrubbing
    2 Disclosedcredentialexposure
    record AIR-2026-1340NVD ↗
  62. 2026-09-04
    CVE-2026-19302
    CVE-2026-19302 in IBM Langflow OSS allows information disclosure via symlink validation
    2 Disclosedinfodiscl
    record AIR-2026-1339NVD ↗
  63. 2026-09-04
    CVE-2026-19298
    CVE-2026-19298: IBM Langflow OSS authorization bypass remote code execution
    2 Disclosedrce · langflow
    record AIR-2026-1338NVD ↗
  64. 2026-09-04
    CVE-2026-17631
    CVE-2026-17631: IBM Langflow OSS server-side request forgery vulnerability
    2 Disclosedssrf · langflow
    record AIR-2026-1337NVD ↗
  65. 2026-09-04
    CVE-2026-17622
    CVE-2026-17622: IBM Langflow OSS information disclosure via path traversal
    2 Disclosedpath-traversal · langflow
    record AIR-2026-1336NVD ↗
  66. 2026-09-04
    CVE-2026-17627
    CVE-2026-17627: IBM Langflow OSS improper authorization workflow history injection
    2 Disclosedauthorization-bypass · langflow
    record AIR-2026-1335NVD ↗
  67. 2026-09-04
    CVE-2026-19303
    CVE-2026-19303: IBM Langflow OSS arbitrary local file deletion vulnerability
    2 Disclosedpath-traversal · langflow
    record AIR-2026-1334NVD ↗
  68. 2026-09-04
    CVE-2026-17621
    CVE-2026-17621: IBM Langflow OSS remote directory traversal vulnerability
    2 Disclosedpath-traversal · infra_vuln
    record AIR-2026-1333NVD ↗
  69. 2026-09-04
    CVE-2026-14470
    CVE-2026-14470: IBM Langflow OSS directory traversal vulnerability
    2 Disclosedpath-traversal · infra_vuln
    record AIR-2026-1332NVD ↗
  70. 2026-09-04
    CVE-2026-9186
    CVE-2026-9186: IBM Langflow OSS localhost MCP configuration bypass
    2 Disclosedmcp · infra_vuln
    record AIR-2026-1331NVD ↗
  71. 2026-09-04
    CVE-2026-19306
    CVE-2026-19306: IBM Langflow OSS arbitrary file read and data exfiltration
    2 Disclosedpath-traversal · data_leak
    record AIR-2026-1330NVD ↗
  72. 2026-09-04
    CVE-2026-9138
    CVE-2026-9138: IBM Langflow OSS arbitrary file write vulnerability
    2 Disclosedpath-traversal · infra_vuln
    record AIR-2026-1329NVD ↗
  73. 2026-09-04
    CVE-2026-19304
    CVE-2026-19304: IBM Langflow OSS URL parser discrepancy information disclosure
    2 Disclosedlangflow · information-disclosure
    record AIR-2026-0102NVD ↗
  74. 2026-08-28
    CVE-2026-18899
    CVE-2026-18899: IBM Langflow OSS path traversal vulnerability
    2 Disclosedlangflow · path-traversal
    record AIR-2026-1317NVD ↗
  75. 2026-08-28
    CVE-2026-18729
    CVE-2026-18729: IBM Langflow OSS code generation control vulnerability
    2 Disclosedlangflow · code-execution
    record AIR-2026-1316NVD ↗
  76. 2026-08-28
    CVE-2026-19294
    CVE-2026-19294: IBM Langflow OSS improper authorization vulnerability
    2 Disclosedlangflow · improper-authorization
    record AIR-2026-1315NVD ↗
  77. 2026-08-28
    CVE-2026-18891
    CVE-2026-18891: IBM Langflow OSS improper authentication vulnerability
    2 Disclosedlangflow · improper-authentication
    record AIR-2026-1314NVD ↗
  78. 2026-08-28
    CVE-2026-19286
    CVE-2026-19286: RCE vulnerability in IBM Langflow OSS A2A public endpoint
    2 Disclosedrce
    record AIR-2026-1313NVD ↗
  79. 2026-08-28
    CVE-2026-18904
    CVE-2026-18904: Information disclosure and message injection in IBM Langflow OSS
    2 Disclosedinformation-disclosure
    record AIR-2026-1312NVD ↗
  80. 2026-08-28
    CVE-2026-18545
    CVE-2026-18545: SSRF vulnerability in IBM Langflow OSS
    2 Disclosedssrf
    record AIR-2026-1311NVD ↗
  81. 2026-08-28
    CVE-2026-19295
    CVE-2026-19295: Command execution vulnerability in IBM Langflow OSS
    2 Disclosedrce · privilege-escalation
    record AIR-2026-1310NVD ↗
  82. 2026-08-19
    CVE-2026-19875
    CVE-2026-19875: IBM Langflow OSS missing authentication vulnerability
    2 Disclosedlangflow · infra_vuln
    record AIR-2026-1292NVD ↗
  83. 2026-08-13
    CVE-2026-19297
    CVE-2026-19297: IBM Langflow OSS authentication restriction vulnerability
    2 Disclosedauth-bypass · langflow
    record AIR-2026-1286NVD ↗
  84. 2026-08-05
    CVE-2026-17633
    CVE-2026-17633: IBM Langflow OSS Authenticated Code Injection
    2 Disclosedcode-injection · langflow
    record AIR-2026-1263NVD ↗
  85. 2026-08-05
    CVE-2026-17630
    CVE-2026-17630: IBM Langflow OSS Arbitrary Code Execution
    2 Disclosedrce · langflow
    record AIR-2026-1262NVD ↗
  86. 2026-08-05
    CVE-2026-8478
    CVE-2026-8478: IBM Langflow OSS Code Injection Vulnerability
    2 Disclosedcode-injection · langflow
    record AIR-2026-1261NVD ↗
  87. 2026-08-05
    CVE-2026-7657
    CVE-2026-7657: IBM Langflow OSS SSRF Vulnerability
    2 Disclosedssrf · langflow
    record AIR-2026-1260NVD ↗
  88. 2026-08-05
    CVE-2026-8182
    CVE-2026-8182: Unauthenticated Remote Code Execution in Langflow OSS
    2 Disclosedrce · unauthenticated
    record AIR-2026-1259NVD ↗
  89. 2026-08-05
    CVE-2026-17632
    CVE-2026-17632: Arbitrary Code Execution Flaw in Langflow OSS AST Scanning
    2 Disclosedrce · ast-scanning
    record AIR-2026-1258NVD ↗
  90. 2026-08-05
    CVE-2026-17623
    CVE-2026-17623: Improper Validation in Langflow OSS Allows Arbitrary Command Execution
    2 Disclosedrce · mcp
    record AIR-2026-1257NVD ↗
  91. 2026-08-05
    CVE-2026-9077
    CVE-2026-9077: Localhost Restriction Bypass in Langflow OSS Writes Arbitrary MCP Configs
    2 Disclosedmcp · configuration-bypass
    record AIR-2026-1256NVD ↗
  92. 2026-08-05
    CVE-2026-8446
    CVE-2026-8446: Authentication Bypass in Langflow OSS MCP Composer Endpoint
    2 Disclosedauth-bypass · mcp
    record AIR-2026-1255NVD ↗
  93. 2026-08-05
    CVE-2026-10128
    CVE-2026-10128: Environment variable exposure vulnerability in IBM Langflow OSS
    2 Disclosedinformation-disclosure
    record AIR-2026-1254NVD ↗
  94. 2026-08-05
    CVE-2026-17626
    CVE-2026-17626: Sensitive host file exposure via Docker MCP in IBM Langflow OSS
    2 Discloseddocker
    record AIR-2026-1253NVD ↗
  95. 2026-08-05
    CVE-2026-17624
    CVE-2026-17624: Arbitrary code execution vulnerability in IBM Langflow OSS
    2 Disclosedcode-execution
    record AIR-2026-1252NVD ↗
  96. 2026-08-05
    CVE-2026-17625
    CVE-2026-17625: OS command execution vulnerability in IBM Langflow OSS
    2 Disclosedrce
    record AIR-2026-1251NVD ↗
  97. 2026-08-05
    CVE-2026-7646
    CVE-2026-7646: Arbitrary file read vulnerability in IBM Langflow OSS
    2 Disclosedpath-traversal · mcp
    record AIR-2026-1250NVD ↗
  98. 2026-08-05
    CVE-2026-10547
    CVE-2026-10547: IBM Langflow OSS Ownership Validation Flaw
    2 Disclosedcache-pollution
    record AIR-2026-1249NVD ↗
  99. 2026-08-05
    CVE-2026-7658
    CVE-2026-7658: IBM Langflow OSS Username Path Traversal Vulnerability
    2 Disclosedpath-traversal
    record AIR-2026-1248NVD ↗
  100. 2026-08-05
    CVE-2026-8183
    CVE-2026-8183: IBM Langflow OSS Directory Traversal Vulnerability
    2 Discloseddirectory-traversal
    record AIR-2026-1247NVD ↗
  101. 2026-08-05
    CVE-2026-7869
    CVE-2026-7869: IBM Langflow OSS Path Traversal in Knowledge Bases API
    2 Disclosedpath-traversal
    record AIR-2026-1246NVD ↗
  102. 2026-08-05
    CVE-2026-8470
    CVE-2026-8470: IBM Langflow OSS Weak Cryptographic Key Generation
    2 Disclosedweak-crypto · path-traversal
    record AIR-2026-1245NVD ↗
  103. 2026-08-05
    CVE-2026-9081
    IBM Langflow OSS Server-Side Request Forgery vulnerability in Ollama provider
    2 Disclosedssrf · infra_vuln
    record AIR-2026-1244NVD ↗
  104. 2026-08-05
    CVE-2026-9196
    IBM Langflow OSS executes unintended code during Agentic Assistant validation
    2 Disclosedcode-execution · infra_vuln
    record AIR-2026-1243NVD ↗
  105. 2026-08-05
    CVE-2026-9130
    IBM Langflow OSS authorization bypass in MemoryComponent leads to chat history exposure
    2 Disclosedauth-bypass · data_leak · infra_vuln
    record AIR-2026-1242NVD ↗
  106. 2026-08-05
    CVE-2026-9201
    IBM Langflow OSS cryptographic weakness allows arbitrary code execution
    2 Disclosedcode-execution · infra_vuln
    record AIR-2026-1241NVD ↗
  107. 2026-08-05
    CVE-2026-9205
    CVE-2026-9205: Langflow Weak Fernet Key Derivation via random.seed()
    2 Disclosedcrypto · langflow
    record AIR-2026-0230NVD ↗
  108. 2026-08-05
    Langflow Duplicate Advisory GHSA-9pw3-x84f-xcwf for Weak Key Derivation
    2 Disclosedghsa-9pw3-x84f-xcwf · crypto
    record AIR-2026-0062GitHub Advisory Database ↗
  109. 2026-07-30
    CVE-2026-13435
    CVE-2026-13435: IBM Langflow OSS PythonREPL Sandbox Input Validation Flaw
    2 Disclosedsandbox-escape
    record AIR-2026-1231NVD ↗
  110. 2026-07-30
    CVE-2026-12946
    CVE-2026-12946: IBM Langflow OSS Remote Code Execution Vulnerability
    2 Disclosedrce
    record AIR-2026-1230NVD ↗
  111. 2026-07-30
    CVE-2026-12945
    CVE-2026-12945: IBM Langflow OSS Build Job Manipulation Vulnerability
    2 Disclosedaccess-control · langflow
    record AIR-2026-1229NVD ↗
  112. 2026-07-30
    CVE-2026-12942
    CVE-2026-12942: IBM Langflow OSS Directory Traversal Vulnerability
    2 Disclosedpath-traversal · langflow
    record AIR-2026-1228NVD ↗
  113. 2026-07-30
    CVE-2026-12940
    CVE-2026-12940: IBM Langflow OSS RCE via Environment Variable Injection
    2 Disclosedrce · mcp · langflow
    record AIR-2026-1227NVD ↗
  114. 2026-07-30
    CVE-2026-13444
    CVE-2026-13444: IBM Langflow OSS Unauthorized Access to Vector Documents
    2 Disclosedvector-database · langflow
    record AIR-2026-1226NVD ↗
  115. 2026-07-30
    CVE-2026-10700
    CVE-2026-10700: IBM Langflow OSS Broken Access Control in File Handling API
    2 Disclosedbroken-access-control · langflow
    record AIR-2026-1225NVD ↗
  116. 2026-07-28
    CVE-2026-13442
    CVE-2026-13442: Vector namespace reuse vulnerability in IBM Langflow OSS
    2 Disclosedinfra_vuln
    record AIR-2026-1218NVD ↗
  117. 2026-07-17
    CVE-2026-7755
    CVE-2026-7755: IBM Langflow Remote Code Execution Vulnerability
    2 Disclosedrce
    record AIR-2026-1207NVD ↗
  118. 2026-07-17
    CVE-2026-7872
    CVE-2026-7872: IBM Langflow Arbitrary File Read and Token Forgery
    2 Disclosedfile_read · authentication_bypass
    record AIR-2026-1206NVD ↗
  119. 2026-07-17
    CVE-2026-7754
    CVE-2026-7754: IBM Langflow SSRF Vulnerability
    2 Disclosedssrf
    record AIR-2026-1205NVD ↗
  120. 2026-07-17
    CVE-2026-8056
    CVE-2026-8056: IBM Langflow OSS parameter overriding vulnerability
    2 Disclosedparameter-override
    record AIR-2026-1204NVD ↗
  121. 2026-07-17
    CVE-2026-14499
    CVE-2026-14499: IBM Langflow OSS arbitrary command execution via Python Interpreter
    2 Disclosedcommand-execution
    record AIR-2026-1203NVD ↗
  122. 2026-07-17
    CVE-2026-13446
    CVE-2026-13446: IBM Langflow OSS hard-coded credentials vulnerability
    2 Disclosedhard-coded-credentials
    record AIR-2026-1202NVD ↗
  123. 2026-07-17
    CVE-2026-8635
    CVE-2026-8635: IBM Langflow OSS authentication bypass and privilege escalation
    2 Disclosedprivilege-escalation
    record AIR-2026-1201NVD ↗
  124. 2026-07-17
    CVE-2026-9202
    CVE-2026-9202: IBM Langflow OSS Unauthenticated User Creation Vulnerability
    2 Disclosedlangflow · account-creation
    record AIR-2026-1199NVD ↗
  125. 2026-07-17
    CVE-2026-7667
    CVE-2026-7667: IBM Langflow OSS Arbitrary File Write Vulnerability
    2 Disclosedlangflow · file-write
    record AIR-2026-1198NVD ↗
  126. 2026-07-17
    CVE-2026-13448
    CVE-2026-13448: IBM Langflow OSS Public Flow Build RCE Vulnerability
    2 Disclosedlangflow · rce
    record AIR-2026-1197NVD ↗
  127. 2026-07-17
    CVE-2026-8481
    CVE-2026-8481: IBM Langflow OSS Code Validation RCE Vulnerability
    2 Disclosedlangflow · rce
    record AIR-2026-1196NVD ↗
  128. 2026-07-17
    CVE-2026-9103
    CVE-2026-9103: IBM Langflow OSS Improper Authentication Vulnerability
    2 Disclosedlangflow · authentication-bypass
    record AIR-2026-1195NVD ↗
  129. 2026-07-17
    CVE-2026-13445
    CVE-2026-13445: IBM Langflow OSS storage boundary violation in SaveToFile component
    2 Disclosedlangflow · path-traversal
    record AIR-2026-1194NVD ↗
  130. 2026-07-17
    CVE-2026-8859
    CVE-2026-8859: IBM Langflow OSS path traversal allows arbitrary file write
    2 Disclosedlangflow · path-traversal
    record AIR-2026-1193NVD ↗
  131. 2026-07-17
    CVE-2026-8476
    CVE-2026-8476: IBM Langflow OSS remote code execution via unsafe pickle deserialization
    2 Disclosedlangflow · insecure-deserialization · rce
    record AIR-2026-1192NVD ↗
  132. 2026-07-17
    CVE-2026-9135
    CVE-2026-9135: IBM Langflow OSS code injection via ToolGuard dynamic fields
    2 Disclosedlangflow · code-injection
    record AIR-2026-1191NVD ↗
  133. 2026-07-17
    CVE-2026-8505
    CVE-2026-8505: Langflow Unauthenticated Flow Execution via Webhook Bypass
    2 Disclosedauthentication-bypass · rce
    record AIR-2026-0246NVD ↗
  134. 2026-07-17
    IBM Langflow OSS Authentication Bypass in Webhooks
    2 Disclosedghsa-9cc5-j3qq-69gv · auth-bypass · langflow
    record AIR-2026-0041GitHub Advisory Database ↗
  135. 2026-06-30
    CVE-2026-7803
    CVE-2026-7803: IBM Langflow OSS flow node arbitrary code execution
    2 Disclosedrce · infra_vuln
    record AIR-2026-1147NVD ↗
  136. 2026-06-30
    CVE-2026-7871
    CVE-2026-7871: IBM Langflow OSS arbitrary code execution vulnerability
    2 Disclosedrce · infra_vuln
    record AIR-2026-1146NVD ↗
  137. 2026-06-30
    CVE-2026-7874
    CVE-2026-7874: IBM Langflow OSS Weak Key Derivation Vulnerability
    2 Disclosedlangflow
    record AIR-2026-1145NVD ↗
  138. 2026-06-30
    CVE-2026-7873
    CVE-2026-7873: IBM Langflow OSS Remote Command Execution Vulnerability
    2 Disclosedlangflow · rce
    record AIR-2026-1144NVD ↗
  139. 2026-06-30
    CVE-2026-7663
    CVE-2026-7663: IBM Langflow OSS MCP Resource Access Vulnerability
    2 Disclosedlangflow · mcp
    record AIR-2026-1143NVD ↗
  140. 2026-06-30
    CVE-2026-10546
    CVE-2026-10546: IBM Langflow OSS SSRF Vulnerability
    2 Disclosedlangflow · ssrf
    record AIR-2026-1142NVD ↗
  141. 2026-06-30
    CVE-2026-10560
    CVE-2026-10560: IBM Langflow OSS Missing Authentication Vulnerability
    2 Disclosedlangflow
    record AIR-2026-1141NVD ↗
  142. 2026-06-30
    CVE-2026-10140
    CVE-2026-10140: IBM Langflow OSS voice mode shared-state flaw leads to cross-tenant API client reuse
    2 Disclosedlangflow · tenant_isolation · infra_vuln
    record AIR-2026-1139NVD ↗
  143. 2026-06-30
    CVE-2026-10134
    CVE-2026-10134: IBM Langflow OSS critical vulnerability enables secret exposure and remote code execution
    2 Disclosedlangflow · rce · infra_vuln
    record AIR-2026-1136NVD ↗
  144. 2026-06-30
    CVE-2026-10129
    CVE-2026-10129: IBM Langflow OSS API request SSRF protection bypass
    2 Disclosedssrf
    record AIR-2026-1135NVD ↗
  145. 2026-06-30
    CVE-2026-10564
    CVE-2026-10564: IBM Langflow OSS SSRF vulnerability in components
    2 Disclosedssrf
    record AIR-2026-1134NVD ↗
  146. 2026-06-22
    CVE-2026-7664
    CVE-2026-7664: Improper authorization flaw in IBM Langflow OSS
    2 Disclosedmcp · authorization
    record AIR-2026-1125NVD ↗
  147. 2026-06-22
    CVE-2026-12822
    CVE-2026-12822: Code injection vulnerability in Langflow URL loader
    2 Disclosedcode_injection
    record AIR-2026-1124NVD ↗
  148. 2026-06-22
    CVE-2026-10561
    CVE-2026-10561: Langflow Unsandboxed PythonREPLComponent Execution
    2 Disclosedrce · privilege-escalation
    record AIR-2026-0247NVD ↗
  149. 2026-06-19
    CVE-2026-55446
    CVE-2026-55446: Langflow unauthenticated DoS vulnerability in file upload
    2 Discloseddos · infra_vuln
    record AIR-2026-0779GitHub Advisory Database ↗
  150. 2026-06-19
    CVE-2026-55447
    CVE-2026-55447: Langflow BaseFileComponent arbitrary file read and RCE vulnerability
    2 Disclosedlangflow · rce
    record AIR-2026-0778GitHub Advisory Database ↗
  151. 2026-06-19
    CVE-2026-55423
    CVE-2026-55423: Langflow logout button fails to clear session tokens
    2 Disclosedsessionmanagement · infravuln
    record AIR-2026-0022GitHub Advisory Database ↗
  152. 2026-06-17
    CVE-2026-55450
    CVE-2026-55450: Langflow unauthenticated file upload leads to DoS and info leak
    2 Disclosedlangflow · dos
    record AIR-2026-0776GitHub Advisory Database ↗
  153. 2026-06-16
    CVE-2026-33760
    CVE-2026-33760: Langflow IDOR/BOLA in Monitor API
    2 Disclosedidor · bola
    record AIR-2026-0753GitHub Advisory Database ↗
  154. 2026-06-16
    CVE-2026-48520
    CVE-2026-48520: Langflow arbitrary local or S3 file read vulnerability
    2 Disclosedidor · file-read
    record AIR-2026-0750GitHub Advisory Database ↗
  155. 2026-06-16
    CVE-2026-42867
    CVE-2026-42867: Langflow path traversal in Knowledge Bases API
    2 Disclosedpath-traversal · langflow
    record AIR-2026-0744GitHub Advisory Database ↗
  156. 2026-06-16
    CVE-2026-48519
    CVE-2026-48519: Langflow unauthenticated RCE in playgrounds
    2 Disclosedrce · langflow
    record AIR-2026-0731GitHub Advisory Database ↗
  157. 2026-06-11
    CVE-2026-7787
    CVE-2026-7787: Authentication bypass vulnerability in IBM Langflow OSS
    2 Disclosedidor · langflow
    record AIR-2026-1108NVD ↗
  158. 2026-06-11
    CVE-2026-3341
    CVE-2026-3341: Server-side request forgery vulnerability in IBM Langflow Desktop
    2 Disclosedssrf · langflow
    record AIR-2026-1107NVD ↗
  159. 2026-05-27
    CVE-2026-7528
    CVE-2026-7528: Denial of service in IBM Langflow OSS
    2 Discloseddos
    record AIR-2026-1093NVD ↗
  160. 2026-05-27
    CVE-2026-7524
    CVE-2026-7524: RCE via symlink validation flaw in IBM Langflow OSS
    2 Disclosedrce · symlink
    record AIR-2026-1092NVD ↗
  161. 2026-05-05
    CVE-2026-42048
    CVE-2026-42048: Langflow knowledge bases API vulnerable to path traversal
    2 Disclosedlangflow · path-traversal
    record AIR-2026-0617GitHub Advisory Database ↗
  162. 2026-05-03
    CVE-2026-7687
    CVE-2026-7687: Langflow CodeParser Command Injection Vulnerability
    2 Disclosedcommand-injection · langflow
    record AIR-2026-1060NVD ↗
  163. 2026-05-03
    CVE-2026-7700
    CVE-2026-7700: Langflow LambdaFilterComponent code injection vulnerability
    2 Disclosedlangflow · code-injection
    record AIR-2026-0011NVD ↗
  164. 2026-05-03
    Langflow Smart Transform prompt injection and code execution vulnerability
    2 Disclosedlangflow · prompt-injection · code-injection
    record AIR-2026-0010GitHub Advisory Database ↗
  165. 2026-04-30
    CVE-2026-4503
    CVE-2026-4503: IBM Langflow Desktop Insecure Direct Object Reference
    2 Disclosedidor · langflow
    record AIR-2026-1059NVD ↗
  166. 2026-04-30
    CVE-2026-6542
    CVE-2026-6542: IBM Langflow OSS Unauthorized Data Access Vulnerability
    2 Disclosedidor · langflow
    record AIR-2026-1058NVD ↗
  167. 2026-04-30
    CVE-2026-3345
    CVE-2026-3345: IBM Langflow Desktop Remote Directory Traversal
    2 Disclosedpath-traversal · langflow
    record AIR-2026-1057NVD ↗
  168. 2026-04-30
    CVE-2026-4502
    CVE-2026-4502: IBM Langflow Desktop Directory Traversal Vulnerability
    2 Disclosedpath-traversal · langflow
    record AIR-2026-1056NVD ↗
  169. 2026-04-30
    CVE-2026-3340
    CVE-2026-3340: IBM Langflow Desktop server-side request forgery
    2 Disclosedlangflow · ssrf
    record AIR-2026-1055NVD ↗
  170. 2026-04-30
    CVE-2026-6543
    CVE-2026-6543: IBM Langflow Desktop arbitrary command execution
    2 Disclosedlangflow · rce
    record AIR-2026-1054NVD ↗
  171. 2026-04-30
    CVE-2026-3346
    CVE-2026-3346: IBM Langflow Desktop stored cross-site scripting
    2 Disclosedlangflow · xss
    record AIR-2026-1053NVD ↗
  172. 2026-04-20
    CVE-2026-6596
    CVE-2026-6596: Unrestricted file upload vulnerability in langflow-ai langflow
    2 Disclosedunrestricted-upload · langflow
    record AIR-2026-1034NVD ↗
  173. 2026-04-20
    CVE-2026-6600
    CVE-2026-6600: Cross-site scripting vulnerability in langflow-ai langflow frontend
    2 Disclosedxss · langflow
    record AIR-2026-1033NVD ↗
  174. 2026-04-20
    CVE-2026-6597
    CVE-2026-6597: Langflow Information Leak via API Key Redaction
    2 Disclosedcredential-leak
    record AIR-2026-0594GitHub Advisory Database ↗
  175. 2026-04-20
    CVE-2026-6599
    CVE-2026-6599: Langflow MCP Configuration API Injection Vulnerability
    2 Disclosedinjection
    record AIR-2026-0593GitHub Advisory Database ↗
  176. 2026-04-20
    CVE-2026-6598
    CVE-2026-6598: Langflow Cleartext Storage of Auth Settings
    2 Disclosedcleartext-storage
    record AIR-2026-0592GitHub Advisory Database ↗
  177. 2026-04-08
    CVE-2026-3357
    IBM Langflow Desktop Insecure Deserialization Vulnerability
    2 Discloseddeserialization · langflow
    record AIR-2026-1022NVD ↗
  178. 2026-03-27
    CVE-2026-34046
    CVE-2026-34046: Langflow IDOR Allows Unauthorized Flow Access
    2 Disclosedidor · langflow
    record AIR-2026-0525GitHub Advisory Database ↗
  179. 2026-03-26
    CVE-2026-33873
    CVE-2026-33873: Langflow Authenticated Code Execution in Agentic Assistant
    2 Disclosedlangflow · rce
    record AIR-2026-0518GitHub Advisory Database ↗
  180. 2026-03-24
    CVE-2026-33475
    CVE-2026-33475: Langflow Remote Shell Injection in CI/CD Workflows
    2 Disclosedcommand-injection · ci-cd
    record AIR-2026-0995NVD ↗
  181. 2026-03-20
    CVE-2026-33484
    Langflow unauthenticated IDOR vulnerability on image downloads
    2 Disclosedidor · unauthenticated
    record AIR-2026-0508GitHub Advisory Database ↗
  182. 2026-03-20
    CVE-2026-33497
    Langflow profile picture endpoint path traversal vulnerability
    2 Disclosedpath-traversal · unauthenticated
    record AIR-2026-0507GitHub Advisory Database ↗
  183. 2026-03-19
    CVE-2026-33309
    CVE-2026-33309: Langflow Arbitrary File Write via v2 API
    2 Disclosedarbitrary-file-write · langflow
    record AIR-2026-0504GitHub Advisory Database ↗
  184. 2026-03-18
    CVE-2026-33053
    CVE-2026-33053: Langflow Missing Ownership Verification in API Key Deletion
    2 Disclosedidor · langflow
    record AIR-2026-0503GitHub Advisory Database ↗
  185. 2026-03-17
    CVE-2026-33017
    CVE-2026-33017: Unauthenticated RCE in Langflow Public Flow Build
    2 Disclosedrce · langflow
    record AIR-2026-0502GitHub Advisory Database ↗
  186. 2026-02-26
    CVE-2026-27966
    CVE-2026-27966: Langflow Remote Code Execution in CSV Agent
    2 Disclosedrce · langflow
    record AIR-2026-0484NVD ↗
  187. 2026-01-23
    CVE-2026-0771
    CVE-2026-0771: Langflow PythonFunction Code Injection Vulnerability
    2 Disclosedcode-injection · rce
    record AIR-2026-0951NVD ↗
  188. 2026-01-23
    CVE-2026-0768
    CVE-2026-0768: Langflow Validate Endpoint Code Injection Vulnerability
    2 Disclosedcode-injection · rce
    record AIR-2026-0950NVD ↗
  189. 2026-01-23
    CVE-2026-0769
    CVE-2026-0769: Langflow eval_custom_component_code RCE Vulnerability
    2 Disclosedcode-injection · rce
    record AIR-2026-0949NVD ↗
  190. 2026-01-23
    CVE-2026-0772
    CVE-2026-0772: Langflow Disk Cache Deserialization RCE Vulnerability
    2 Discloseddeserialization · rce
    record AIR-2026-0947NVD ↗
  191. 2026-01-23
    CVE-2026-0770
    CVE-2026-0770: Langflow Remote Code Execution via validate_code
    2 Disclosedrce · infra_vuln
    record AIR-2026-0438GitHub Advisory Database ↗
  192. 2026-01-02
    CVE-2026-21445
    CVE-2026-21445: Langflow Missing Authentication on Critical API Endpoints
    2 Disclosedlangflow · auth_bypass · data_leak
    record AIR-2026-0424GitHub Advisory Database ↗
  193. 2025-12-19
    CVE-2025-68478
    CVE-2025-68478: Arbitrary file creation vulnerability in Langflow
    2 Disclosedarbitrary-file-write · langflow
    record AIR-2025-0047NVD ↗
  194. 2025-12-19
    CVE-2025-68477
    CVE-2025-68477: SSRF vulnerability via API Request component in Langflow
    2 Disclosedssrf · langflow
    record AIR-2025-0046NVD ↗
  195. 2025-12-05
    CVE-2025-34291
    CVE-2025-34291: Langflow Chained Account Takeover and RCE
    2 Disclosedcors · infra_vuln
    record AIR-2025-0035NVD ↗
  196. 2025-08-25
    CVE-2025-57760
    CVE-2025-57760: Langflow Privilege Escalation via CLI
    2 Disclosedprivilege-escalation
    record AIR-2025-0328GitHub Advisory Database ↗
  197. 2025-04-07
    CVE-2025-32375
    Langflow Vulnerable to Code Injection via Validate Code Endpoint
    2 Disclosedrce · code-injection
    record AIR-2025-0269GitHub Advisory Database ↗
  198. 2024-11-04
    CVE-2024-48061
    CVE-2024-48061: Langflow Remote Code Execution Vulnerability
    2 Disclosedlangflow · rce
    record AIR-2024-0199NVD ↗
  199. 2024-10-31
    CVE-2024-42835
    CVE-2024-42835: Langflow Remote Code Execution Vulnerability
    2 Disclosedlangflow · rce
    record AIR-2024-0197GitHub Advisory Database ↗
  200. 2024-09-27
    CVE-2024-9277
    CVE-2024-9277: Langflow regular expression complexity vulnerability
    2 Disclosedredos
    record AIR-2024-0174GitHub Advisory Database ↗
  201. 2024-07-30
    CVE-2024-7297
    CVE-2024-7297: Privilege escalation vulnerability in Langflow
    2 Disclosedprivilege-escalation · langflow
    record AIR-2024-0248NVD ↗
  202. 2024-06-10
    CVE-2024-37014
    CVE-2024-37014: Langflow remote code execution vulnerability
    2 Disclosedrce · langflow
    record AIR-2024-0137GitHub Advisory Database ↗

Other incidents: research and unexploited reports · 1

  1. 2026-03-31
    RCE Vulnerabilities in LLM-Integrated Applications via Prompt Injection
    1 Researchrce · frameworks · prompt-injection
    record AIR-2026-0350MITRE ATLAS ↗

This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.