Langflow Vulnerabilities

pip LLM Frameworks

AI Threat Alert tracks 162 known vulnerabilities in Langflow, 47 rated critical — an AI/ML llm frameworks in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
77
Risk Score
162
Total CVEs
47
Critical
pip
Ecosystem
Sep 10, 2026
Last CVE
17%
Patch Rate
73d
Avg Time to Patch
155,288 stars 10,150 forks 1,188 issues Last push Sep 27, 2026
View on GitHub

Known Vulnerabilities (162 total, page 1 of 7)

Severity CVE ID Summary CVSS Published
HIGH CVE-2026-84889 Langflow: authenticated path traversal enables RCE 8.8 Sep 10, 2026 HIGH CVE-2026-81941 Langflow: MCP stdio tool bypasses RCE lockdown 8.8 Sep 10, 2026 HIGH CVE-2026-81268 Langflow: stale API keys survive user deactivation 8.1 Sep 10, 2026 HIGH CVE-2026-81265 Langflow: unauthenticated SSRF exposes internal resources 7.5 Sep 10, 2026 HIGH CVE-2026-81213 IBM Langflow: SSRF exposes internal network resources 8.6 Sep 10, 2026 HIGH CVE-2026-81211 Langflow: broken authz on components enables RCE 8.8 Sep 10, 2026 CRITICAL CVE-2026-81204 Langflow: unauthenticated RCE via code injection 9.8 Sep 10, 2026 HIGH CVE-2026-79742 Langflow: RCE via incomplete env var blocklist 8.8 Sep 10, 2026 MEDIUM CVE-2026-79725 Langflow: authenticated arbitrary file read flaw 6.5 Sep 10, 2026 CRITICAL CVE-2026-79724 Langflow: unauthenticated OS command injection (CVSS 9.8) 9.8 Sep 10, 2026 MEDIUM CVE-2026-79723 Langflow: SSRF via unvalidated API endpoints leaks data 5.0 Sep 10, 2026 HIGH CVE-2026-78575 Langflow: RCE via unsanitized MCP stdio server args 8.8 Sep 10, 2026 HIGH CVE-2026-78571 Langflow: authenticated RCE via unguarded eval() 8.8 Sep 10, 2026 HIGH CVE-2026-78569 Langflow: incomplete denylist enables authenticated RCE 8.8 Sep 10, 2026 HIGH CVE-2026-76059 Langflow: RCE via scanner bypass in custom components 8.8 Sep 10, 2026 MEDIUM CVE-2026-9225 Langflow: IDOR in File component leaks user files 6.5 Sep 10, 2026 CRITICAL CVE-2026-85025 Langflow: unauth RCE via public MCP endpoints 9.8 Sep 10, 2026 MEDIUM CVE-2026-17631 Langflow: authenticated SSRF exposes internal hosts 6.5 Sep 4, 2026 HIGH CVE-2026-17627 Langflow: IDOR leaks and poisons workflow history 7.1 Sep 4, 2026 MEDIUM CVE-2026-17622 Langflow: path traversal exposes sensitive files 6.5 Sep 4, 2026 MEDIUM CVE-2026-17621 Langflow: path traversal allows arbitrary file read 5.4 Sep 4, 2026 MEDIUM CVE-2026-14470 Langflow: auth'd path traversal reads arbitrary files 6.5 Sep 4, 2026 HIGH CVE-2026-19306 Langflow: chat attachment path traversal leaks server secrets 7.7 Sep 4, 2026 HIGH CVE-2026-19305 Langflow: SSRF flaw exposes internal/cloud metadata 7.5 Sep 4, 2026 HIGH CVE-2026-19304 Langflow: SSRF via URL parser bypass exposes internal services 7.7 Sep 4, 2026

Showing 1–25 of 162

Frequently asked questions

What is Langflow?

Langflow is an AI/ML llm frameworks tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Langflow have?

Langflow has 162 known CVEs, 47 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Langflow distributed in?

Langflow is distributed via the pip ecosystem and categorized as llm frameworks.

Where does the Langflow vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Langflow?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Langflow in your stack

Get instant alerts when new vulnerabilities affect Langflow. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring