Langflow vulnerabilities
6 published CVEs name Langflow among the affected products; CISA lists 2 of them as exploited in the wild.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 4Critical2 more rated high
- 2Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-0770
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
Langflow · Langflow
ExploitedCritical9.8 - CVE-2025-34291
Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
Langflow · Langflow
ExploitedCritical9.4