LO
Product
Langflow OSS
On CISA KEVExploited in the wild
175
CVEs
1
On KEV
10.0
Max CVSS
58
New 30D
Severity mix
Critical 43High 81Medium 50Low 1
Watch
Add Langflow OSS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-101288 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.3 |
| CVE-2026-104324 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.3 |
| CVE-2026-104328 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.3 |
| CVE-2026-107326 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.4 |
| CVE-2026-110193 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.8 |
| CVE-2026-110196 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.4 |
| CVE-2026-110244 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.4 |
| CVE-2026-110309 New | 8.8 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.4 |
| CVE-2026-88962 | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-93443 | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-93449 | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-93445 | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-97673 | 8.8 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-97678 | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-97679 | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-97655 | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-97676 | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-104335 | 8.8 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-76059 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-78569 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-78571 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-78575 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-79742 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-81211 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-81941 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-81940 | 8.8 | Sep 10 | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards Affected: 1.0.0 through 1.11.5 |
| CVE-2026-84889 | 8.8 | Sep 10 | A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem Affected: 1.0.0 through 1.10.3 |
| CVE-2026-19298 | 8.8 | Sep 4 | Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint Affected: 1.0.0 through 1.11.2 |
| CVE-2026-18729 | 8.8 | Aug 28 | Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement Affected: 1.0.0 through 1.11.1 |
| CVE-2026-17624 | 8.8 | Aug 5 | Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling Affected: 1.0.0 through 1.10.3 |
| CVE-2026-17633 | 8.8 | Aug 5 | Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling Affected: 1.0.0 through 1.10.3 |
| CVE-2026-17632 | 8.8 | Aug 5 | Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling Affected: 1.0.0 through 1.10.3 |
| CVE-2026-9196 | 8.8 | Aug 5 | Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling Affected: 1.0.0 through 1.10.3 |
| CVE-2026-8182 | 8.8 | Aug 5 | Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling Affected: 1.0.0 through 1.10.3 |
| CVE-2026-9201 | 8.8 | Aug 5 | Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling Affected: 1.0.0 through 1.10.3 |
| CVE-2026-8478 | 8.8 | Aug 5 | Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling Affected: 1.0.0 through 1.10.3 |
| CVE-2026-17625 | 8.8 | Aug 5 | Langflow is affected by OS Command Injection in Model Context Protocol features Affected: 1.0.0 through 1.10.3 |
| CVE-2026-17623 | 8.8 | Aug 5 | Langflow is affected OS Command Injection in Model Context Protocol features Affected: 1.0.0 through 1.10.3 |
| CVE-2026-17630 | 8.8 | Aug 5 | Langflow is affected by security vulnerabilities in Model Context Protocol features Affected: 1.0.0 through 1.10.3 |
| CVE-2026-17626 | 8.8 | Aug 5 | Langflow is affected by security vulnerabilities in Model Context Protocol features Affected: 1.0.0 through 1.10.3 |
| CVE-2026-14499 | 8.8 | Jul 17 | Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-7667 | 8.8 | Jul 17 | Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing Affected: 1.0.0 through 1.10.0 |
| CVE-2026-7755 | 8.8 | Jul 17 | MCP Server Configuration Validator Bypass via File Upload API Affected: 1.0.0 through 1.10.0 |
| CVE-2026-8056 | 8.8 | Jul 17 | Parameter Injection Vulnerability in API Graph Execution Engine Affected: 1.0.0 through 1.10.0 |
| CVE-2026-81213 | 8.6 | Sep 10 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches Affected: 1.0.0 through 1.11.5 |
| CVE-2026-103092 New | 8.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.3 |
| CVE-2026-9077 | 8.5 | Aug 5 | Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features Affected: 1.0.0 through 1.10.3 |
| CVE-2026-10129 | 8.5 | Jun 30 | SSRF via HTTP Redirect Following in Langflow API Request Component Affected: 1.0.0 through 1.9.3 |
| CVE-2026-107366 | 8.3 | Oct 19 | Langflow OSS Authorization Bypass Through User-Controlled Key Affected: 1.0.0 through 1.12.4 |
| CVE-2026-97680 | 8.3 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |