Langflow vulnerabilities and CVEs
The Beam CVE database tracks 43 security advisories for Langflow: 14 critical, 18 high, 8 medium and 3 low severity. 5 are known to be exploited (CISA KEV). The newest is CVE-2026-105697, published Oct 7, 2026 and fixed in 1.10.3, 0.10.3.
A visual builder for agents and LLM pipelines that runs flows, including custom Python components, on its server.
Check your version: pip show langflow or pip show langflow-base
- Vulnerabilities tracked
- 43
- Critical
- 14
- Known exploited (CISA KEV)
- 5
- Published in the last 30 days
- 10
All entries, newest first
CVE-2026-105697
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
critical9.9Oct 7, 2026CVE-2026-105698
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
medium5.4Oct 7, 2026CVE-2026-105699
Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
high7.1Oct 7, 2026CVE-2026-105741
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
high7.1Oct 7, 2026CVE-2026-10561
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation
critical9.9Oct 6, 2026GHSA-j8f7-x8jm-wmm4
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)
medium6.3Oct 6, 2026CVE-2026-51886
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
high8.8Oct 5, 2026CVE-2026-7700
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
high8.8Oct 5, 2026CVE-2026-8505
Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
critical9.8Oct 5, 2026CVE-2026-9205
Langflow: Weak Fernet Key via random.seed()
critical9.1Oct 5, 2026CVE-2026-55255
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
high8.4ExploitedJun 19, 2026CVE-2026-55423
Langflow: Logout button does not clear session
medium6.1Jun 19, 2026CVE-2026-55446
Langflow: Unauthenticated DoS through multipart form boundary file upload
high7.5Jun 19, 2026CVE-2026-55447
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
critical9.6Jun 19, 2026CVE-2026-55450
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
critical9.3Jun 17, 2026CVE-2026-33760
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
high8.8Jun 16, 2026CVE-2026-42867
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
medium6.5Jun 16, 2026CVE-2026-48519
Langflow: Unauthenticated RCE in Shareable Playgrounds
critical9.6Jun 16, 2026CVE-2026-48520
Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read
medium6.1Jun 16, 2026CVE-2026-42048
Langflow Knowledge Bases API is Vulnerable to Path Traversal
critical9.6May 5, 2026CVE-2026-6596
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
medium7.3Apr 20, 2026CVE-2026-6597
Langflow has an Information Leak through Incomplete API Key Redaction
low2.7No fixApr 20, 2026CVE-2026-6598
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint
low4.3Apr 20, 2026CVE-2026-6599
Langflow vulnerable to injection
low6.3No fixApr 20, 2026CVE-2026-34046
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
high8.7Mar 27, 2026CVE-2026-33873
Langflow has Authenticated Code Execution in Agentic Assistant Validation
critical9.3Mar 26, 2026CVE-2026-33484
langflow has Unauthenticated IDOR on Image Downloads
high7.5Mar 20, 2026CVE-2026-33497
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
high8.7Mar 20, 2026CVE-2026-33309
Langflow has an Arbitrary File Write (RCE) via v2 API
critical9.9Mar 19, 2026CVE-2026-33053
Langflow is Missing Ownership Verification in API Key Deletion (IDOR)
high7.1Mar 18, 2026CVE-2026-33017
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
critical9.8ExploitedMar 17, 2026CVE-2026-27966
Langflow has Remote Code Execution in CSV Agent
critical9.8No fixFeb 27, 2026CVE-2026-0770
Langflow affected by Remote Code Execution via validate_code() exec()
high8.9ExploitedNo fixJan 23, 2026CVE-2026-21445
Langflow Missing Authentication on Critical API Endpoints
high8.8Jan 2, 2026CVE-2025-68477
Langflow vulnerable to Server-Side Request Forgery
high7.7Dec 19, 2025CVE-2025-68478
External Control of File Name or Path in Langflow
high7.1Dec 19, 2025CVE-2025-34291
Langflow CORS misconfiguration enables Account Takeover and RCE
critical8.8ExploitedDec 6, 2025CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
high8.8Aug 25, 2025CVE-2025-3248
Langflow Unauth RCE
critical9.3ExploitedJun 17, 2025CVE-2024-48061
Langflow vulnerable to remote code execution
medium9.8No fixNov 5, 2024CVE-2024-42835
langflow has vulnerability in PythonCodeTool component
high9.8No fixOct 31, 2024CVE-2024-9277
Inefficient Regular Expression Complexity in langflow
medium3.5No fixSep 27, 2024CVE-2024-37014
Langflow remote code execution vulnerability
high8.8Jun 10, 2024
Withdrawn advisories (5)
GHSA-qqw9-2vj9-hx7r
Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
highWithdrawnOct 2, 2026GHSA-9pw3-x84f-xcwf
Duplicate Advisory: Langflow: Weak Fernet Key via random.seed()
high7.4WithdrawnAug 5, 2026GHSA-9cc5-j3qq-69gv
Duplicate Advisory: Unauthenticated Flow Execution via Webhook Authentication Bypass
critical9.8WithdrawnJul 17, 2026GHSA-hhxr-7j22-694r
Duplicate Advisory: Prompt injection in Langflow Smart Transform can lead to code execution
low6.3WithdrawnMay 3, 2026GHSA-c995-4fw3-j39m
Duplicate Advisory: Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint
critical9.8WithdrawnApr 7, 2025