langflow-ai langflow vulnerabilities
42 published CVEs name langflow-ai langflow among the affected products; CISA lists 3 of them as exploited in the wild.
- 42Published CVEs42 of them scored
- 40Last 12 monthspublished in the last year
- 12Critical14 more rated high
- 3Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-55255
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
langflow-ai · langflow
ExploitedHigh8.4 - CVE-2026-33017
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
langflow-ai · langflow
ExploitedCritical9.3 - CVE-2025-3248
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
langflow-ai · langflow
ExploitedCritical9.8