Known Vulnerabilities for products from Langflow
Listed below are 5 of the newest known vulnerabilities associated with the vendor "Langflow".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34046 json | Not Provided | 2026-03-27 | 2026-04-01 | |
| CVE-2026-33873 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant ... | Not Provided | 2026-03-27 | 2026-04-03 |
| CVE-2026-6600 json | Not Provided | 2026-04-20 | 2026-04-20 | |
| CVE-2026-6599 json | Not Provided | 2026-04-20 | 2026-04-20 | |
| CVE-2026-6598 json | Not Provided | 2026-04-20 | 2026-04-20 | |
| CVE-2026-6597 json | Not Provided | 2026-04-20 | 2026-04-20 | |
| CVE-2026-6596 json | Not Provided | 2026-04-20 | 2026-04-20 | |
| CVE-2026-5026 json | The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sani... | Not Provided | 2026-03-27 | 2026-04-20 |
| CVE-2026-5025 json | The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buff... | Not Provided | 2026-03-27 | 2026-04-20 |
| CVE-2026-5022 json | The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowi... | Not Provided | 2026-03-27 | 2026-04-20 |
| CVE-2026-3357 json | IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, ... | Not Provided | 2026-04-08 | 2026-04-14 |