Langflow Vulnerabilities

pip LLM Frameworks

AI Threat Alert tracks 162 known vulnerabilities in Langflow, 47 rated critical — an AI/ML llm frameworks in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
77
Risk Score
162
Total CVEs
47
Critical
pip
Ecosystem
Sep 10, 2026
Last CVE
17%
Patch Rate
73d
Avg Time to Patch
155,288 stars 10,150 forks 1,188 issues Last push Sep 27, 2026
View on GitHub

Known Vulnerabilities (162 total, page 4 of 7)

Severity CVE ID Summary CVSS Published
HIGH CVE-2026-13442 Langflow: FAISS namespace reuse leaks cross-user vectors 7.1 Jul 28, 2026 CRITICAL CVE-2026-13446 Langflow: hard-coded credentials enable takeover 9.8 Jul 17, 2026 HIGH CVE-2026-13445 Langflow: SaveToFile flaw breaks user storage isolation 8.1 Jul 17, 2026 CRITICAL CVE-2026-8859 Langflow: path traversal writes arbitrary files 9.9 Jul 17, 2026 CRITICAL CVE-2026-8635 Langflow: DB manipulation escalates to superuser RCE 9.9 Jul 17, 2026 CRITICAL CVE-2026-8505 Langflow: webhook auth bypass enables unauth RCE 9.8 Jul 17, 2026 CRITICAL CVE-2026-8481 Langflow: unsandboxed exec() enables full RCE 9.9 Jul 17, 2026 CRITICAL CVE-2026-8476 Langflow: pickle deserialization RCE via disk cache (CVSS 9.9) 9.9 Jul 17, 2026 HIGH CVE-2026-8056 Langflow: auth'd param injection via apply_tweaks() enables code exec 8.8 Jul 17, 2026 HIGH CVE-2026-7872 Langflow: path traversal enables auth token forgery 8.1 Jul 17, 2026 HIGH CVE-2026-7755 Langflow: MCP config validation gap enables RCE 8.8 Jul 17, 2026 MEDIUM CVE-2026-7754 Langflow: SSRF via incomplete protection bypass 6.5 Jul 17, 2026 HIGH CVE-2026-7667 Langflow: path traversal in flow URLs enables file write 8.8 Jul 17, 2026 HIGH CVE-2026-14499 Langflow: command execution via Python Interpreter flaw 8.8 Jul 17, 2026 CRITICAL CVE-2026-13448 Langflow: unauthenticated RCE via public flow endpoint 9.8 Jul 17, 2026 CRITICAL CVE-2026-9135 Langflow: code injection bypasses ToolGuard, enables RCE 9.9 Jul 17, 2026 CRITICAL CVE-2026-9103 Langflow: unauth request grants superuser token 9.8 Jul 17, 2026 CRITICAL CVE-2026-9202 Langflow: unauth signup chains to RCE 9.8 Jul 17, 2026 CRITICAL CVE-2026-9198 Langflow: token forgery + exec() chain to RCE 9.8 Jul 17, 2026 CRITICAL CVE-2026-7874 Langflow: weak reversible KDF exposes all stored credentials 9.1 Jun 30, 2026 CRITICAL CVE-2026-7873 Langflow: authenticated RCE enables credential theft 9.9 Jun 30, 2026 CRITICAL CVE-2026-7871 Langflow: Redis-access deserialization enables full RCE 9.8 Jun 30, 2026 CRITICAL CVE-2026-7803 Langflow: malformed flow nodes enable RCE 9.8 Jun 30, 2026 CRITICAL CVE-2026-7663 Langflow: auth bypass in MCP transport exposes projects 9.8 Jun 30, 2026 HIGH CVE-2026-10564 Langflow: SSRF via RSS/SearXNG exposes cloud IAM creds 8.2 Jun 30, 2026

Showing 76–100 of 162

Frequently asked questions

What is Langflow?

Langflow is an AI/ML llm frameworks tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Langflow have?

Langflow has 162 known CVEs, 47 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Langflow distributed in?

Langflow is distributed via the pip ecosystem and categorized as llm frameworks.

Where does the Langflow vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Langflow?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Langflow in your stack

Get instant alerts when new vulnerabilities affect Langflow. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring