Langflow vulnerabilities
6 published CVEs name Langflow among the affected products; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 6
- Last 12 months
- 6
- Critical
- 4
- Known exploited
- 2
Critical 4High 2Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20251
- 20265
Known exploitedNewest addition to KEV first
- CVE-2026-0770
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Langflow · Langflow
ExploitedCritical9.8 - CVE-2025-34291
Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
Langflow · Langflow
ExploitedCritical9.4
Newest CVEs
- CVE-2026-0772
Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability
Langflow · Langflow
High7.5 - CVE-2026-0771
Langflow PythonFunction Code Injection Remote Code Execution Vulnerability
Langflow · Langflow
High7.1 - CVE-2026-0770
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Langflow · Langflow
ExploitedCritical9.8 - CVE-2026-0769
Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability
Langflow · Langflow
Critical9.8 - CVE-2026-0768
Langflow code Code Injection Remote Code Execution Vulnerability
Langflow · Langflow
Critical9.8 - CVE-2025-34291
Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
Langflow · Langflow
ExploitedCritical9.4