Skip to content
THREATWIRE

CVE Tracker · Vendor

Langflow CVEs

9 CVEs in the tracker, 5 in the CISA KEV catalogue.

All vendors · RSS feed for Langflow · Tracker data last updated 18 Oct 2026.

Showing 9 of 9

  1. CVE-2026-93675CVSS 9.8 criticalEPSS 0.75%2026-10-07

    langflow. IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expec…

  2. CVE-2026-93449CVSS 8.8 highEPSS 0.68%2026-10-07

    langflow. IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code d…

  3. CVE-2026-93445CVSS 8.8 highEPSS 0.73%2026-10-07

    langflow. IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code d…

  4. CVE-2026-93443CVSS 8.8 highEPSS 0.68%2026-10-07

    langflow. IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code d…

  5. CVE-2025-3248CVSS 9.8 criticalEPSS 100%KEV2025-04-07

    Langflow. Langflow Missing Authentication Vulnerability

  6. CVE-2026-55255No CVSSEPSS 0.89%KEV

    Langflow. Langflow Authorization Bypass Through User-Controlled Key Vulnerability

  7. CVE-2026-33017No CVSSEPSS 24.8%KEV

    Langflow. Langflow Code Injection Vulnerability

  8. CVE-2026-0770No CVSSEPSS 63.0%KEV

    Langflow. Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

  9. CVE-2025-34291No CVSSEPSS 92.8%KEV

    Langflow. Langflow Origin Validation Error Vulnerability