Known Vulnerabilities for products from Langflow
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Langflow".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-55450 json | Not Provided | 2026-06-23 | 2026-06-23 | |
| CVE-2026-55447 json | Not Provided | 2026-06-23 | 2026-06-24 | |
| CVE-2026-55446 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-55423 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not cle... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-55255 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Refe... | Not Provided | 2026-06-23 | 2026-07-08 |
| CVE-2026-48520 json | Not Provided | 2026-06-23 | 2026-06-24 | |
| CVE-2026-48519 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or... | Not Provided | 2026-06-23 | 2026-06-26 |
| CVE-2026-42867 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path... | Not Provided | 2026-06-23 | 2026-06-26 |
| CVE-2026-42048 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path... | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-34046 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.5.1, the `_read_flow` helpe... | Not Provided | 2026-03-27 | 2026-05-11 |
| CVE-2026-33873 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant ... | Not Provided | 2026-03-27 | 2026-04-03 |
| CVE-2026-33760 json | Not Provided | 2026-06-23 | 2026-06-24 | |
| CVE-2026-33017 json | Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/b... | Not Provided | 2026-03-20 | 2026-05-21 |
| CVE-2026-19875 json | Not Provided | 2026-08-19 | 2026-08-20 | |
| CVE-2026-17633 json | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injec... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-17632 json | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper v... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-17630 json | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of c... | Not Provided | 2026-08-05 | 2026-08-07 |
| CVE-2026-17626 json | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive hos... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-17625 json | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-17624 json | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3... | Not Provided | 2026-08-05 | 2026-08-06 |