Langflow-ai vulnerabilities
42 CVEs and advisories name Langflow-ai as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-105741Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
- CVE-2026-105740Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server
- CVE-2026-105699Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
- CVE-2026-105698Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
- CVE-2026-105697Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
- CVE-2026-101861Langflow Code Execution via eval() in Component Input Schema
- CVE-2026-48520Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read
- CVE-2026-33760Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
- CVE-2026-42867Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
- CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
- CVE-2026-55423Langflow: Logout button does not clear session
- CVE-2026-55446Langflow: Unauthenticated DoS through multipart form boundary file upload
- CVE-2026-48519Langflow: Unauthenticated RCE in Shareable Playgrounds
- CVE-2026-55447Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
- CVE-2026-55450Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
- CVE-2026-12822langflow-ai langflow Bundle URL Loader code injection
- CVE-2026-42048Langflow: Path Traversal in Langflow Knowledge Bases API
- CVE-2026-7700langflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection
- CVE-2026-7687langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection
- CVE-2026-6600langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting
- CVE-2026-6599langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection
- CVE-2026-6598langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file
- CVE-2026-6597langflow-ai langflow Flow Using API core.py has_api_terms credentials storage
- CVE-2026-6596langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload
- CVE-2026-34046Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
- CVE-2026-33873Langflow has Authenticated Code Execution in Agentic Assistant Validation
- CVE-2026-5027Langflow - Path Traversal Arbitrary File Write via upload_user_file
- CVE-2026-5026Langflow - Stored XSS via Malicious SVG Upload
- CVE-2026-5025Langflow - Application Logs Exposed to All Authenticated Users
- CVE-2026-5022Langflow - Missing Authorization on download_image Endpoint