LO
Product
Langflow OSS
On CISA KEVExploited in the wild
175
CVEs
1
On KEV
10.0
Max CVSS
58
New 30D
Severity mix
Critical 43High 81Medium 50Low 1
Watch
Add Langflow OSS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18904 | 8.2 | Aug 28 | Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities Affected: 1.0.0 through 1.11.1 |
| CVE-2026-18891 | 8.2 | Aug 28 | Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities Affected: 1.0.0 through 1.11.1 |
| CVE-2026-10564 | 8.2 | Jun 30 | SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection Affected: 1.0.0 through 1.9.6 |
| CVE-2026-104317 New | 8.1 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.3 |
| CVE-2026-97674 | 8.1 | Oct 6 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-81268 | 8.1 | Sep 10 | Langflow is vulnerable to authentication bypass and insufficient session expiration Affected: 1.0.0 through 1.11.5 |
| CVE-2026-19303 | 8.1 | Sep 4 | Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-10547 | 8.1 | Aug 5 | Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement Affected: 1.0.0 through 1.10.3 |
| CVE-2026-13444 | 8.1 | Jul 30 | Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-13445 | 8.1 | Jul 17 | Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-7872 | 8.1 | Jul 17 | Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication Bypass Affected: 1.0.0 through 1.10.0 |
| CVE-2026-7787 | 8.1 | Jun 11 | Unauthenticated Session History Access via Public Flow Execution Affected: 1.0.0 through 1.9.1 |
| CVE-2026-6542 | 8.1 | Apr 30 | Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id Affected: 1.0.0 through 1.8.4 |
| CVE-2026-19304 | 7.7 | Sep 4 | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-19306 | 7.7 | Sep 4 | Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-8183 | 7.7 | Aug 5 | Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement Affected: 1.0.0 through 1.10.3 |
| CVE-2026-93678 | 7.6 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-110245 New | 7.5 | Oct 29 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.4 |
| CVE-2026-93447 | 7.5 | Oct 7 | Langflow OSS is affected by multiple vulnerabilities Affected: 1.0.0 through 1.12.2 |
| CVE-2026-81265 | 7.5 | Sep 10 | Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches Affected: 1.0.0 through 1.11.5 |
| CVE-2026-19300 | 7.5 | Sep 4 | Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows Affected: 1.0.0 through 1.11.2 |
| CVE-2026-19305 | 7.5 | Sep 4 | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components Affected: 1.0.0 through 1.11.2 |
| CVE-2026-18899 | 7.5 | Aug 28 | Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities Affected: 1.0.0 through 1.11.1 |
| CVE-2026-8446 | 7.5 | Aug 5 | Langflow is affected by security vulnerabilities in Model Context Protocol features Affected: 1.0.0 through 1.10.3 |
| CVE-2026-12942 | 7.5 | Jul 30 | Langflow is affected by path traversal due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-7528 | 7.5 | May 27 | Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS Affected: 1.0.0 through 1.9.0 |
| CVE-2026-17627 | 7.1 | Sep 4 | Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint Affected: 1.0.0 through 1.10.2 |
| CVE-2026-9130 | 7.1 | Aug 5 | Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement Affected: 1.0.0 through 1.10.3 |
| CVE-2026-9081 | 7.1 | Aug 5 | Langflow OSS is affected by server-side request forgery in provider validation and API request functionality Affected: 1.0.0 through 1.10.3 |
| CVE-2026-12945 | 7.1 | Jul 30 | Langflow is affected by exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |
| CVE-2026-13442 | 7.1 | Jul 28 | Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints Affected: 1.0.0 through 1.10.1 |