CVE Tools
Track your stack

Langflow-ai

22 CVEs tracked since 2026. Since Mar 2026, 1 of them reached CISA KEV.

Langflow-ai CVEs per month

Mar 2026 to Jun 2026. Point at a month, or focus the strip and use the arrow keys.
Langflow-ai CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-03121
2026-04null or fewer
2026-05null or fewer
2026-06100

Products

The products that kept showing up in Langflow-ai's monthly top three, with their CVEs summed over those months.

  1. Langflow222 months
  2. Langflow-base11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Langflow-ai.

  1. CVE-2026-48520Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read6.1
  2. CVE-2026-33760Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints8.8
  3. CVE-2026-42867Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint6.5
  4. CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow8.4
  5. CVE-2026-55423Langflow: Logout button does not clear session6.1
  6. CVE-2026-55446Langflow: Unauthenticated DoS through multipart form boundary file upload7.5
  7. CVE-2026-48519Langflow: Unauthenticated RCE in Shareable Playgrounds9.6
  8. CVE-2026-55447Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit9.6
  9. CVE-2026-55450Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak9.3
  10. CVE-2026-12822langflow-ai langflow Bundle URL Loader code injection5.3
  11. CVE-2026-42048Langflow: Path Traversal in Langflow Knowledge Bases API9.6
  12. CVE-2026-7700langflow-ai langflow LambdaFilterComponent lambda_filter.p eval code injection6.3
  13. CVE-2026-7687langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection6.3
  14. CVE-2026-6600langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting3.5
  15. CVE-2026-6599langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection6.3

The record

Peak rank
#94 in Mar 2026
Busiest month shown
Mar 2026, 12 CVEs
Months with a KEV entry
1 since Mar 2026
Monthly snapshots
2 since 2026
Langflow-ai's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store