Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

langflow-ai

langflow-ai langflow-base vulnerabilities

3 published CVEs name langflow-ai langflow-base among the affected products.

Newest CVEs

  • CVE-2026-105698

    Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

    langflow-ai · langflow

    Medium5.4
  • CVE-2026-105697

    Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

    langflow-ai · langflow

    Critical9.9
  • CVE-2026-34046

    Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check

    langflow-ai · langflow

    High8.7