langflow-ai vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 202638

Known exploitedNewest addition to KEV first

• CVE-2026-55255

  Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

  langflow-ai · langflow

  ExploitedHigh8.4
• CVE-2026-33017

  Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

  langflow-ai · langflow

  ExploitedCritical9.3
• CVE-2025-3248

  Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

  langflow-ai · langflow

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-105741

  Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

  langflow-ai · langflow

  High7.1
• CVE-2026-105740

  Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

  langflow-ai · langflow

  Critical9.9
• CVE-2026-105699

  Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

  langflow-ai · langflow

  High7.1
• CVE-2026-105698

  Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

  langflow-ai · langflow

  Medium5.4
• CVE-2026-105697

  Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

  langflow-ai · langflow

  Critical9.9
• CVE-2026-101861

  Langflow Code Execution via eval() in Component Input Schema

  langflow-ai · langflow

  Low2.1
• CVE-2026-48520

  Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read

  langflow-ai · langflow

  Medium6.1
• CVE-2026-33760

  Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints

  langflow-ai · langflow

  High8.8
• CVE-2026-42867

  Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint

  langflow-ai · langflow

  Medium6.5
• CVE-2026-55255

  Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

  langflow-ai · langflow

  ExploitedHigh8.4