Langflow vulnerabilities and fixes
Exploited and high-severity Langflow vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.5CVE-2026-110245IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication.Fix availableLangflow Langflow
1 min read - 9.9CVE-2026-107327IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.Fix availableLangflow Langflow
1 min read - 9.9CVE-2026-107328IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in RCEFix availableLangflow Langflow
1 min read - 9.9CVE-2026-107329IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generationRCEFix availableLangflow Langflow
1 min read - 8.1CVE-2026-104317IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to RCEFix availableLangflow Langflow
1 min read - 8.5CVE-2026-103092IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access control.Fix availableLangflow Langflow
1 min read - 9.8CVE-2026-9198IBM Langflow Code Injection VulnerabilityRCEExploitedFix availableIBM Langflow
1 min read - 9.8CVE-2026-0770Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 8.4CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 9.4CVE-2025-34291Langflow Origin Validation Error VulnerabilityExploitedVerify fixLangflow Langflow
1 min read