Executive brief
Langflow vulnerable to Server-Side Request Forgery
Affected products
- PyPI langflow
Junglewise Threat Intelligence
CVE-2025-68477: PYSEC-2026-1522 - Langflow vulnerable to Server-Side Request Forgery
CVE-2025-68477 · Severity: low · CVSS 3.1 · Published 2026-07-07
Vendors: PyPI.
Related threats
- PYSEC-2026-2571 - Langflow Missing Authentication on Critical API Endpoints
- PYSEC-2026-1526 - Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
- PYSEC-2026-1523 - Langflow vulnerable to remote code execution
- PYSEC-2026-1521 - Inefficient Regular Expression Complexity in langflow
- PYSEC-2026-376 - Langflow has Remote Code Execution in CSV Agent