Advisoriesby Ibis
Langflow security advisories
43 advisories · 29 critical or high in 12 months · latest Oct 7
43 advisories
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationCVE-2026-105697fixed in 1.10.3Langflow: insecure direct object referenceCVE-2026-105698fixed in 1.10.1Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersCVE-2026-105699fixed in 1.9.1Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration WriteCVE-2026-105741fixed in 1.10.3Langflow: server-side request forgeryGHSA-j8f7-x8jm-wmm4fixed in 1.10.3Langflow: remote code executionCVE-2026-10561fixed in 1.10.1Langflow: Weak Fernet Key via random.seed()CVE-2026-9205fixed in 1.10.1Langflow: Unauthenticated Flow Execution via Webhook Authentication BypassCVE-2026-8505fixed in 1.9.1Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators DescriptionCVE-2026-51886fixed in 1.10.1Langflow: Prompt injection in Langflow Smart Transform can lead to code executionCVE-2026-7700fixed in 1.10.3Langflow: Code Injection Vulnerability in Code Validation EndpointCVE-2026-7873fixed in 1.10.1.rc0Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploitCVE-2026-55447fixed in 1.9.2Langflow: Unauthenticated DoS through multipart form boundary file uploadCVE-2026-55446fixed in 1.0.19Langflow: Logout button does not clear sessionCVE-2026-55423fixed in 1.7.0Langflow: insecure direct object referenceCVE-2026-55255fixed in 1.9.1Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leakCVE-2026-55450fixed in 1.9.1Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file readCVE-2026-48520fixed in 1.10.0Langflow: Unauthenticated RCE in Shareable PlaygroundsCVE-2026-48519fixed in 1.9.2Langflow: Path Traversal in Knowledge Bases API via Creation EndpointCVE-2026-42867fixed in 1.9.0Langflow: IDOR/BOLA in Monitor API , Missing Ownership Enforcement on 7 EndpointsCVE-2026-33760fixed in 1.9.0Langflow Knowledge Bases API is Vulnerable to Path TraversalCVE-2026-42048fixed in 1.9.0Langflow: Cleartext Storage of Authentication Settings in Project Creation EndpointCVE-2026-6598fixed in 1.9.1Langflow vulnerable to injectionCVE-2026-6599no fix yetLangflow has an Information Leak through Incomplete API Key RedactionCVE-2026-6597no fix yetLangflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership CheckCVE-2026-34046fixed in 1.5.1Langflow has Authenticated Code Execution in Agentic Assistant ValidationCVE-2026-33873fixed in 1.9.0langflow: /profile_pictures/{folder_name}/{file_name} endpoint file readingCVE-2026-33497fixed in 1.7.1langflow has Unauthenticated IDOR on Image DownloadsCVE-2026-33484fixed in 1.9.0Langflow has an Arbitrary File Write (RCE) via v2 APICVE-2026-33309fixed in 1.9.0Langflow is Missing Ownership Verification in API Key Deletion (IDOR)CVE-2026-33053fixed in 1.9.0Unauthenticated Remote Code Execution in Langflow via Public Flow Build EndpointCVE-2026-33017fixed in 1.9.0Langflow has Remote Code Execution in CSV AgentCVE-2026-27966no fix yetLangflow affected by Remote Code Execution via validate_code() exec()CVE-2026-0770no fix yetLangflow Missing Authentication on Critical API EndpointsCVE-2026-21445fixed in 1.7.1External Control of File Name or Path in LangflowCVE-2025-68478fixed in 1.7.1Langflow vulnerable to Server-Side Request ForgeryCVE-2025-68477fixed in 1.7.1Langflow CORS misconfiguration enables Account Takeover and RCECVE-2025-34291fixed in 1.7.0Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)CVE-2025-57760fixed in 1.5.1Langflow Unauth RCECVE-2025-3248fixed in 1.3.0Langflow vulnerable to remote code executionCVE-2024-48061no fix yetlangflow has vulnerability in PythonCodeTool componentCVE-2024-42835no fix yetInefficient Regular Expression Complexity in langflowCVE-2024-9277no fix yetLangflow remote code execution vulnerabilityCVE-2024-37014fixed in 1.0.15About Langflow
The visual builder for agents and RAG flows.
Packages watched: langflow (PyPI).
DataStax elsewhere on Ibis: Acquisitions · Paydays · Repos