# langflow-base (PyPI) vulnerabilities

7 known vulnerabilities (2 critical, 3 high, 2 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: 1.13.1 (Nov 4, 2026): no advisory affects it
- Newest unaffected release: 1.13.1 (Nov 4, 2026), the latest release
- Weekly downloads: 7,026
- Releases: 379 since 0.0.13 (Apr 1, 2024)
- Registry: https://pypi.org/project/langflow-base/
- Releases read: Nov 8, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-105698: 0.0.13 to 0.10.1rc3 (0.10.1 is outside it)
- CVE-2026-105697: 0.1.2 to 0.10.3rc0 (0.10.3 is outside it)
- CVE-2026-6596: 0.0.13 to 0.9.0 (0.9.1 is outside it)
- CVE-2026-34046: 0.0.13 to 0.5.0.post2 (0.5.1 is outside it)
- CVE-2026-21445: 0.0.13 to 0.7.0 (0.7.1 is outside it)
- CVE-2025-57760: 0.0.13 to 0.5.0.post2 (0.5.1 is outside it)
- CVE-2025-3248: 0.0.13 to 0.2.0 (0.3.0 is outside it)

## Advisories (7)

### [CVE-2026-105698](https://cve.now/CVE-2026-105698): Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow\_id}/vertices endpoints

- Severity: Medium 5.4
- Published: Oct 5, 2026
- Affected: fixed in 0.10.1.
- Fixed in 0.10.1 (released Jun 23, 2026, 104 days before disclosure).
- The latest release, 1.13.1, is not affected.

### [CVE-2026-105697](https://cve.now/CVE-2026-105697): Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

- Severity: Critical 9.9
- Published: Oct 5, 2026
- Affected: from 0.1.2, fixed in 0.10.3.
- Fixed in 0.10.3 (released Jul 23, 2026, 74 days before disclosure).
- The latest release, 1.13.1, is not affected.

### [CVE-2026-6596](https://cve.now/CVE-2026-6596): langflow-ai langflow API Endpoint endpoints.py create\_upload\_file unrestricted upload

- Severity: Medium 6.9
- Published: Apr 20, 2026
- Affected: fixed in 0.9.1.
- Fixed in 0.9.1 (released Apr 24, 2026, 4 days after disclosure).
- The latest release, 1.13.1, is not affected.

### [CVE-2026-34046](https://cve.now/CVE-2026-34046): Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check

- Severity: High 8.7
- Published: Mar 27, 2026
- Affected: fixed in 0.5.1.
- Fixed in 0.5.1 (released Aug 28, 2025, 211 days before disclosure).
- The latest release, 1.13.1, is not affected.

### [CVE-2026-21445](https://cve.now/CVE-2026-21445): Langflow Missing Authentication on Critical API Endpoints

- Severity: High 8.8
- Published: Jan 2, 2026
- Affected: fixed in 0.7.1.
- Fixed in 0.7.1 (released Dec 19, 2025, 14 days before disclosure).
- The latest release, 1.13.1, is not affected.

### [CVE-2025-57760](https://cve.now/CVE-2025-57760): Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation

- Severity: High 8.8
- Published: Aug 25, 2025
- Affected: fixed in 0.5.1.
- Fixed in 0.5.1 (released Aug 28, 2025, 3 days after disclosure).
- The latest release, 1.13.1, is not affected.

### [CVE-2025-3248](https://cve.now/CVE-2025-3248): Langflow \< 1.3.0 Unauthenticated RCE via /api/v1/validate/code

- Severity: Critical 9.8 · KEV
- Published: Apr 7, 2025
- Affected: fixed in 0.3.0.
- Fixed in 0.3.0 (released Mar 31, 2025, 7 days before disclosure).
- The latest release, 1.13.1, is not affected.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/langflow-base
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.