Langflow Vulnerabilities

pip LLM Frameworks

AI Threat Alert tracks 108 known vulnerabilities in Langflow, 42 rated critical — an AI/ML llm frameworks in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
77
Risk Score
108
Total CVEs
42
Critical
pip
Ecosystem
Aug 13, 2026
Last CVE
24%
Patch Rate
70d
Avg Time to Patch
153,284 stars 9,863 forks 970 issues Last push Aug 16, 2026
View on GitHub

Known Vulnerabilities (108 total, page 2 of 5)

Severity CVE ID Summary CVSS Published
CRITICAL CVE-2026-8635 Langflow: DB manipulation escalates to superuser RCE 9.9 Jul 17, 2026 CRITICAL CVE-2026-8505 Langflow: webhook auth bypass enables unauth RCE 9.8 Jul 17, 2026 CRITICAL CVE-2026-8481 Langflow: unsandboxed exec() enables full RCE 9.9 Jul 17, 2026 CRITICAL CVE-2026-8476 Langflow: pickle deserialization RCE via disk cache (CVSS 9.9) 9.9 Jul 17, 2026 HIGH CVE-2026-8056 Langflow: auth'd param injection via apply_tweaks() enables code exec 8.8 Jul 17, 2026 HIGH CVE-2026-7872 Langflow: path traversal enables auth token forgery 8.1 Jul 17, 2026 HIGH CVE-2026-7755 Langflow: MCP config validation gap enables RCE 8.8 Jul 17, 2026 MEDIUM CVE-2026-7754 Langflow: SSRF via incomplete protection bypass 6.5 Jul 17, 2026 HIGH CVE-2026-7667 Langflow: path traversal in flow URLs enables file write 8.8 Jul 17, 2026 HIGH CVE-2026-14499 Langflow: command execution via Python Interpreter flaw 8.8 Jul 17, 2026 CRITICAL CVE-2026-13448 Langflow: unauthenticated RCE via public flow endpoint 9.8 Jul 17, 2026 CRITICAL CVE-2026-9135 Langflow: code injection bypasses ToolGuard, enables RCE 9.9 Jul 17, 2026 CRITICAL CVE-2026-9103 Langflow: unauth request grants superuser token 9.8 Jul 17, 2026 CRITICAL CVE-2026-9202 Langflow: unauth signup chains to RCE 9.8 Jul 17, 2026 CRITICAL CVE-2026-9198 Langflow: token forgery + exec() chain to RCE 9.8 Jul 17, 2026 CRITICAL CVE-2026-7874 Langflow: weak reversible KDF exposes all stored credentials 9.1 Jun 30, 2026 CRITICAL CVE-2026-7873 Langflow: authenticated RCE enables credential theft 9.9 Jun 30, 2026 CRITICAL CVE-2026-7871 Langflow: Redis-access deserialization enables full RCE 9.8 Jun 30, 2026 CRITICAL CVE-2026-7803 Langflow: malformed flow nodes enable RCE 9.8 Jun 30, 2026 CRITICAL CVE-2026-7663 Langflow: auth bypass in MCP transport exposes projects 9.8 Jun 30, 2026 HIGH CVE-2026-10564 Langflow: SSRF via RSS/SearXNG exposes cloud IAM creds 8.2 Jun 30, 2026 CRITICAL CVE-2026-10560 Langflow: missing auth on build API leaks data, enables DoS 9.1 Jun 30, 2026 MEDIUM CVE-2026-10546 Langflow: SSRF via DNS rebinding in URL component 6.5 Jun 30, 2026 CRITICAL CVE-2026-10140 Langflow: cross-tenant API credential leak via cache bug 9.6 Jun 30, 2026 CRITICAL CVE-2026-10134 Langflow: unauthenticated RCE via tool_code injection 10.0 Jun 30, 2026

Showing 26–50 of 108

Frequently asked questions

What is Langflow?

Langflow is an AI/ML llm frameworks tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Langflow have?

Langflow has 108 known CVEs, 42 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Langflow distributed in?

Langflow is distributed via the pip ecosystem and categorized as llm frameworks.

Where does the Langflow vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Langflow?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Langflow in your stack

Get instant alerts when new vulnerabilities affect Langflow. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring