PyPIPackage

langflow-base

7 known vulnerabilities (2 critical, 3 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release: 1.13.1 (Nov 4, 2026): no advisory affects it
Newest unaffected release: 1.13.1 (Nov 4, 2026), the latest release
Advisories: 7 · 2 critical, 3 high, 2 medium

Weekly downloads: 7,026
Releases: 379 since 0.0.13 (Apr 1, 2024)
Registry: PyPI
Releases read: Nov 8, 2026

Version timeline

CVE-2026-105698
Affects 0.0.13 to 0.10.1rc3 (0.10.1 is outside it)
CVE-2026-105697
Affects 0.1.2 to 0.10.3rc0 (0.10.3 is outside it)
CVE-2026-6596
Affects 0.0.13 to 0.9.0 (0.9.1 is outside it)
CVE-2026-34046
Affects 0.0.13 to 0.5.0.post2 (0.5.1 is outside it)
CVE-2026-21445
Affects 0.0.13 to 0.7.0 (0.7.1 is outside it)
CVE-2025-57760
Affects 0.0.13 to 0.5.0.post2 (0.5.1 is outside it)
CVE-2025-3248
Affects 0.0.13 to 0.2.0 (0.3.0 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 7

CVE-2026-105698Medium 5.4
Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
Affected: fixed in 0.10.1.
Fixed in 0.10.1 (released Jun 23, 2026, 104 days before disclosure).
The latest release, 1.13.1, is not affected.
CVE-2026-105697Critical 9.9
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Affected: from 0.1.2, fixed in 0.10.3.
Fixed in 0.10.3 (released Jul 23, 2026, 74 days before disclosure).
The latest release, 1.13.1, is not affected.
CVE-2026-6596Medium 6.9
langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload
Affected: fixed in 0.9.1.
Fixed in 0.9.1 (released Apr 24, 2026, 4 days after disclosure).
The latest release, 1.13.1, is not affected.
CVE-2026-34046High 8.7
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
Affected: fixed in 0.5.1.
Fixed in 0.5.1 (released Aug 28, 2025, 211 days before disclosure).
The latest release, 1.13.1, is not affected.
CVE-2026-21445High 8.8
Langflow Missing Authentication on Critical API Endpoints
Affected: fixed in 0.7.1.
Fixed in 0.7.1 (released Dec 19, 2025, 14 days before disclosure).
The latest release, 1.13.1, is not affected.
CVE-2025-57760High 8.8
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation
Affected: fixed in 0.5.1.
Fixed in 0.5.1 (released Aug 28, 2025, 3 days after disclosure).
The latest release, 1.13.1, is not affected.
CVE-2025-3248Critical 9.8 · KEV
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
Affected: fixed in 0.3.0.
Fixed in 0.3.0 (released Mar 31, 2025, 7 days before disclosure).
The latest release, 1.13.1, is not affected.