# cve.now: Langflow-ai

The newest entries naming Langflow-ai as an affected vendor (up to 200), of 42 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-105741](https://cve.now/CVE-2026-105741.md): Langflow: IP Spoofing Bypass via \`X-Forwarded-For\` Allowing Remote Configuration Write (CVSS 7.1)
- [CVE-2026-105740](https://cve.now/CVE-2026-105740.md): Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server (CVSS 9.9)
- [CVE-2026-105699](https://cve.now/CVE-2026-105699.md): Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers (CVSS 7.1)
- [CVE-2026-105698](https://cve.now/CVE-2026-105698.md): Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow\_id}/vertices endpoints (CVSS 5.4)
- [CVE-2026-105697](https://cve.now/CVE-2026-105697.md): Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration (CVSS 9.9)
- [CVE-2026-101861](https://cve.now/CVE-2026-101861.md): Langflow Code Execution via eval() in Component Input Schema (CVSS 2.1)
- [CVE-2026-48520](https://cve.now/CVE-2026-48520.md): Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read (CVSS 6.1)
- [CVE-2026-33760](https://cve.now/CVE-2026-33760.md): Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints (CVSS 8.8)
- [CVE-2026-42867](https://cve.now/CVE-2026-42867.md): Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint (CVSS 6.5)
- [CVE-2026-55255](https://cve.now/CVE-2026-55255.md): Langflow: IDOR Vulnerability in \`/api/v1/responses\` Endpoint Allows Authenticated Attackers to Access Another User's Flow (CVSS 8.4, KEV)
- [CVE-2026-55423](https://cve.now/CVE-2026-55423.md): Langflow: Logout button does not clear session (CVSS 6.1)
- [CVE-2026-55446](https://cve.now/CVE-2026-55446.md): Langflow: Unauthenticated DoS through multipart form boundary file upload (CVSS 7.5)
- [CVE-2026-48519](https://cve.now/CVE-2026-48519.md): Langflow: Unauthenticated RCE in Shareable Playgrounds (CVSS 9.6)
- [CVE-2026-55447](https://cve.now/CVE-2026-55447.md): Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit (CVSS 9.6)
- [CVE-2026-55450](https://cve.now/CVE-2026-55450.md): Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak (CVSS 9.3)
- [CVE-2026-12822](https://cve.now/CVE-2026-12822.md): langflow-ai langflow Bundle URL Loader code injection (CVSS 4.8)
- [CVE-2026-42048](https://cve.now/CVE-2026-42048.md): Langflow: Path Traversal in Langflow Knowledge Bases API (CVSS 9.6)
- [CVE-2026-7700](https://cve.now/CVE-2026-7700.md): langflow-ai langflow LambdaFilterComponent lambda\_filter.py eval code injection (CVSS 5.3)
- [CVE-2026-7687](https://cve.now/CVE-2026-7687.md): langflow-ai langflow Full Builtins code\_parser.py CodeParser.parse\_callable\_details command injection (CVSS 5.3)
- [CVE-2026-6600](https://cve.now/CVE-2026-6600.md): langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting (CVSS 5.1)
- [CVE-2026-6599](https://cve.now/CVE-2026-6599.md): langflow-ai langflow Model Context Protocol Configuration API mcp\_projects.py install\_mcp\_config injection (CVSS 5.3)
- [CVE-2026-6598](https://cve.now/CVE-2026-6598.md): langflow-ai langflow Project Creation Endpoint projects.py encrypt\_auth\_settings cleartext storage in file (CVSS 5.3)
- [CVE-2026-6597](https://cve.now/CVE-2026-6597.md): langflow-ai langflow Flow Using API core.py has\_api\_terms credentials storage (CVSS 5.1)
- [CVE-2026-6596](https://cve.now/CVE-2026-6596.md): langflow-ai langflow API Endpoint endpoints.py create\_upload\_file unrestricted upload (CVSS 6.9)
- [CVE-2026-34046](https://cve.now/CVE-2026-34046.md): Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check (CVSS 8.7)
- [CVE-2026-33873](https://cve.now/CVE-2026-33873.md): Langflow has Authenticated Code Execution in Agentic Assistant Validation (CVSS 9.3)
- [CVE-2026-5027](https://cve.now/CVE-2026-5027.md): Langflow - Path Traversal Arbitrary File Write via upload\_user\_file (CVSS 8.8)
- [CVE-2026-5026](https://cve.now/CVE-2026-5026.md): Langflow - Stored XSS via Malicious SVG Upload (CVSS 7.0)
- [CVE-2026-5025](https://cve.now/CVE-2026-5025.md): Langflow - Application Logs Exposed to All Authenticated Users (CVSS 6.5)
- [CVE-2026-5022](https://cve.now/CVE-2026-5022.md): Langflow - Missing Authorization on download\_image Endpoint (CVSS 6.3)
- [CVE-2026-33497](https://cve.now/CVE-2026-33497.md): Langflow: /profile\_pictures/{folder\_name}/{file\_name} endpoint file reading (CVSS 8.7)
- [CVE-2026-33484](https://cve.now/CVE-2026-33484.md): Langflow has Unauthenticated IDOR on Image Downloads (CVSS 7.5)
- [CVE-2026-33475](https://cve.now/CVE-2026-33475.md): Langflow GitHub Actions Shell Injection (CVSS 9.1)
- [CVE-2026-33309](https://cve.now/CVE-2026-33309.md): Langflow has an Arbitrary File Write (RCE) via v2 API (CVSS 10.0)
- [CVE-2026-33053](https://cve.now/CVE-2026-33053.md): Langflow has Missing Ownership Verification in API Key Deletion (IDOR) (CVSS 6.1)
- [CVE-2026-33017](https://cve.now/CVE-2026-33017.md): Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint (CVSS 9.3, KEV)
- [CVE-2026-27966](https://cve.now/CVE-2026-27966.md): Langflow has Remote Code Execution in CSV Agent (CVSS 9.8)
- [CVE-2026-21445](https://cve.now/CVE-2026-21445.md): Langflow Missing Authentication on Critical API Endpoints (CVSS 8.8)
- [CVE-2025-68478](https://cve.now/CVE-2025-68478.md): Langflow Vulnerable to External Control of File Name or Path (CVSS 7.1)
- [CVE-2025-68477](https://cve.now/CVE-2025-68477.md): Langflow vulnerable to Server-Side Request Forgery (CVSS 7.7)
- [CVE-2025-57760](https://cve.now/CVE-2025-57760.md): Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (CVSS 8.8)
- [CVE-2025-3248](https://cve.now/CVE-2025-3248.md): Langflow \< 1.3.0 Unauthenticated RCE via /api/v1/validate/code (CVSS 9.8, KEV)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/langflow-ai
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.