CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,469 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,469
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product langflow:langflow. Show all products

171 CVEs, showing 101 to 150PreviousPage 3 of 4Next
CVESeverityTitlePublished
CVE-2026-13442High 7.1IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results.Jul 28, 2026
CVE-2026-13446Critical 9.8IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external co…Jul 17, 2026
CVE-2026-13445High 8.1IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify another user's uploaded files by specifying absolute paths pointing to…Jul 17, 2026
CVE-2026-8859Critical 9.9IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component.Jul 17, 2026
CVE-2026-8635Critical 9.9IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system…Jul 17, 2026
CVE-2026-8505Critical 9.8IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow.Jul 17, 2026
CVE-2026-8481Critical 9.9IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint.Jul 17, 2026
CVE-2026-8476Critical 9.9IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism.Jul 17, 2026
CVE-2026-8056High 8.8IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API.Jul 17, 2026
CVE-2026-7872High 8.1IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and forge authentication tokens for any user.Jul 17, 2026
CVE-2026-7755High 8.8IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server configuration files.Jul 17, 2026
CVE-2026-7754Medium 6.5IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.Jul 17, 2026
CVE-2026-7667High 8.8IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header (e…Jul 17, 2026
CVE-2026-14499High 8.8IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input…Jul 17, 2026
CVE-2026-13448Critical 9.8IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public_tmp/{flow_id}/flow ).Jul 17, 2026
CVE-2026-9135Critical 9.9IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies component's ToolGuard inte…Jul 17, 2026
CVE-2026-9103Critical 9.8IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint.Jul 17, 2026
CVE-2026-9202Critical 9.8IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployment option), newly c…Jul 17, 2026
CVE-2026-9198
Known exploited
Critical 9.8Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
Assigned by ibm
Jul 17, 2026
CVE-2026-7874Critical 9.1IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest.Jun 30, 2026
CVE-2026-7873Critical 9.9IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral m…Jun 30, 2026
CVE-2026-7871Critical 9.8IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity.Jun 30, 2026
CVE-2026-7803Critical 9.8IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields.Jun 30, 2026
CVE-2026-7663Critical 9.8IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Stream…Jun 30, 2026
CVE-2026-10564High 8.2IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF).Jun 30, 2026
CVE-2026-10560Critical 9.1IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerability in /api/v1/build_public_tmp/ endpoints that allows an unauthenticated attacker to read build event data or cancel…Jun 30, 2026
CVE-2026-10546Medium 6.5IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component ( src/lfx/src/lfx/components/data_source/url.py ) due to a Time-of-Check/Time-of-…Jun 30, 2026
CVE-2026-10140Critical 9.6IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries.Jun 30, 2026
CVE-2026-10134Critical 10.0IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, and saved component in…Jun 30, 2026
CVE-2026-10129High 8.5IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component.Jun 30, 2026
CVE-2026-55450Critical 9.3Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-55447Critical 9.6Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-55446High 7.5Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-55423Medium 6.1Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-48520Medium 6.1Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-48519Critical 9.6Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-42867Medium 6.5Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-33760High 8.8Langflow is a tool for building and deploying AI-powered agents and workflows.Jun 23, 2026
CVE-2026-55255
Known exploited
High 8.4Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
Assigned by GitHub_M
Jun 23, 2026
CVE-2026-7664Critical 9.8IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Stream…Jun 22, 2026
CVE-2026-10561Critical 10.0IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute ar…Jun 22, 2026
CVE-2026-12822High 7.8A vulnerability was identified in langflow-ai langflow up to 1.9.3.Jun 22, 2026
CVE-2026-7787High 8.1IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.Jun 11, 2026
CVE-2026-7528High 7.5IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption.May 27, 2026
CVE-2026-7524Critical 9.8IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction.May 27, 2026
CVE-2026-42048Critical 9.6Langflow is a tool for building and deploying AI-powered agents and workflows.May 12, 2026
CVE-2026-6542High 8.1IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for an…Apr 30, 2026
CVE-2026-3357High 8.8IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting which permits the deserialization of…Apr 8, 2026
CVE-2026-34046High 8.8Langflow is a tool for building and deploying AI-powered agents and workflows.Mar 27, 2026
CVE-2026-33873Critical 9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Mar 27, 2026
PreviousPage 3 of 4Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.