What’s Vulnerable › Products

langflow-ai langflow-base vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your langflow-ai langflow-base version is affected

Latest langflow-ai langflow-base vulnerabilities

• CVE-2026-105698 — Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints (CVSS 5.4)
• CVE-2026-105697 — Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration (CVSS 9.9)
• CVE-2026-34046 — Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check (CVSS 8.8)