Langflow Vulnerabilities

pip LLM Frameworks

AI Threat Alert tracks 162 known vulnerabilities in Langflow, 47 rated critical — an AI/ML llm frameworks in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
77
Risk Score
162
Total CVEs
47
Critical
pip
Ecosystem
Sep 10, 2026
Last CVE
17%
Patch Rate
73d
Avg Time to Patch
155,288 stars 10,150 forks 1,188 issues Last push Sep 27, 2026
View on GitHub

Known Vulnerabilities (162 total, page 3 of 7)

Severity CVE ID Summary CVSS Published
HIGH CVE-2026-8183 Langflow: path traversal exposes arbitrary files 7.7 Aug 5, 2026 HIGH CVE-2026-8182 Langflow: pre-auth RCE via chained HTTP requests 8.8 Aug 5, 2026 MEDIUM CVE-2026-7869 Langflow: path traversal allows arbitrary file write 5.4 Aug 5, 2026 MEDIUM CVE-2026-7658 Langflow: username path traversal enables data destruction 6.5 Aug 5, 2026 HIGH CVE-2026-17633 Langflow: authenticated code injection enables RCE 8.8 Aug 5, 2026 HIGH CVE-2026-17632 Langflow: AST code scanner bypass enables auth'd RCE 8.8 Aug 5, 2026 HIGH CVE-2026-17624 Langflow: authenticated RCE via unsafe module imports 8.8 Aug 5, 2026 HIGH CVE-2026-10547 Langflow: broken access control enables cache poisoning 8.1 Aug 5, 2026 HIGH CVE-2026-9081 Langflow: SSRF in Ollama config hits internal hosts 7.1 Aug 5, 2026 MEDIUM CVE-2026-7657 Langflow: SSRF bypass exposes internal network/cloud data 6.5 Aug 5, 2026 HIGH CVE-2026-17625 Langflow: RCE via authenticated OS command injection 7.2 Aug 5, 2026 MEDIUM CVE-2026-10128 Langflow: built-in component leaks server env vars 6.5 Aug 5, 2026 HIGH CVE-2026-9077 Langflow: MCP config write bypasses localhost restriction 8.5 Aug 5, 2026 HIGH CVE-2026-8446 Langflow: OAuth auth bypass on MCP composer endpoint 7.5 Aug 5, 2026 MEDIUM CVE-2026-7646 Langflow: path traversal via MCP leaks JWT secret 6.5 Aug 5, 2026 HIGH CVE-2026-17630 Langflow: RCE via improper config parameter validation 8.8 Aug 5, 2026 HIGH CVE-2026-17626 Langflow: Docker MCP volume-mount flaw exposes host files 8.8 Aug 5, 2026 HIGH CVE-2026-17623 Langflow: MCP config command injection allows RCE 8.8 Aug 5, 2026 CRITICAL CVE-2026-12946 Langflow: unsanitized code input enables RCE 9.9 Jul 30, 2026 HIGH CVE-2026-13444 Langflow: IDOR exposes/poisons cross-tenant RAG vectors 8.1 Jul 30, 2026 MEDIUM CVE-2026-10700 Langflow: IDOR in file API leaks cross-tenant data 6.5 Jul 30, 2026 HIGH CVE-2026-12942 Langflow: path traversal exposes arbitrary server files 7.5 Jul 30, 2026 CRITICAL CVE-2026-13435 Langflow: PythonREPL sandbox escape enables RCE 9.9 Jul 30, 2026 HIGH CVE-2026-12945 Langflow: IDOR exposes/manipulates other users' builds 7.1 Jul 30, 2026 CRITICAL CVE-2026-12940 Langflow: unauth RCE via MCP env var injection 9.8 Jul 30, 2026

Showing 51–75 of 162

Frequently asked questions

What is Langflow?

Langflow is an AI/ML llm frameworks tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Langflow have?

Langflow has 162 known CVEs, 47 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Langflow distributed in?

Langflow is distributed via the pip ecosystem and categorized as llm frameworks.

Where does the Langflow vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Langflow?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Langflow in your stack

Get instant alerts when new vulnerabilities affect Langflow. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring