{"schema_version":1,"title":"Langflow-Ai Langflow vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Langflow-Ai Langflow: 0 in the last 7 days and 6 in the last 90 days, 4 of them critical and 2 exploited in the wild. The most recent, CVE-2026-105741, was published on 5 October 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before. 0 critical against 1.","url":"https://junglewise.ai/threats/technologies/langflow-ai-langflow","json_url":"https://junglewise.ai/threats/technologies/langflow-ai-langflow.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/langflow-ai-langflow","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":5,"all_time":10,"critical":4,"exploited":2,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":9},"latest":[{"cve":"CVE-2026-105741","cvss":7.1,"epss":0.0021,"slug":"cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow IP spoofing in MCP configuration installation","severity":"high","exploited":false,"published_at":"2026-10-05T21:16:35.74+00:00","url":"https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-105740","cvss":9.9,"slug":"cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow command injection in MCP server configuration","severity":"critical","exploited":false,"published_at":"2026-10-05T21:16:35.567+00:00","url":"https://junglewise.ai/threats/cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-105699","cvss":4,"epss":0.0025,"slug":"cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow path traversal and cross-user disclosure in MCP resources","severity":"high","exploited":false,"published_at":"2026-10-05T21:16:35.41+00:00","url":"https://junglewise.ai/threats/cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"slug":"duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9","title":"Langflow code injection in validate_code endpoint","severity":"high","exploited":false,"published_at":"2026-10-02T00:31:30+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9"},{"cve":"CVE-2026-51888","epss":0.0023,"slug":"cve-2026-51888-langflow-ai-langflow-v1-8-4-is-affected-by-directory-traversal","title":"langflow directory traversal in knowledge base creation","severity":"info","exploited":false,"published_at":"2026-10-01T22:17:03.527+00:00","url":"https://junglewise.ai/threats/cve-2026-51888-langflow-ai-langflow-v1-8-4-is-affected-by-directory-traversal"},{"cve":"CVE-2026-51886","cvss":8.8,"epss":0.004,"slug":"cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the","title":"langflow code injection in validate endpoint","severity":"high","exploited":false,"published_at":"2026-10-01T22:17:03.387+00:00","url":"https://junglewise.ai/threats/cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the"},{"cve":"CVE-2026-55255","cvss":9.9,"epss":0.0089,"slug":"cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow","title":"Langflow IDOR in responses endpoint allows cross-user flow execution","severity":"critical","exploited":true,"published_at":"2026-06-23T17:17:08.05+00:00","url":"https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow"},{"cve":"CVE-2026-27966","cvss":9.8,"epss":0.3525,"slug":"cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python","title":"Langflow has Remote Code Execution in CSV Agent","severity":"critical","exploited":false,"published_at":"2026-02-27T15:47:29+00:00","url":"https://junglewise.ai/threats/cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python"},{"cve":"CVE-2025-68478","cvss":7.1,"epss":0.0579,"slug":"cve-2025-68478-langflow-arbitrary-file-write-via-fs-path-parameter","title":"Langflow arbitrary file write via fs_path parameter","severity":"high","exploited":false,"published_at":"2025-12-19T18:15:51.623+00:00","url":"https://junglewise.ai/threats/cve-2025-68478-langflow-arbitrary-file-write-via-fs-path-parameter"},{"cve":"CVE-2025-3248","cvss":4,"epss":0.9999,"slug":"cve-2025-3248-langflow-missing-authentication-vulnerability","title":"Langflow Unauth RCE","severity":"critical","exploited":true,"published_at":"2025-06-17T20:14:26+00:00","url":"https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-05","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Langflow-Ai Langflow","slug":"langflow-ai-langflow","vendor":{"hub":true,"name":"Langflow-Ai","slug":"langflow-ai","url":"https://junglewise.ai/threats/vendors/langflow-ai"},"aliases":[],"category":"framework","repo_url":"https://github.com/langflow-ai/langflow","description":"Framework for building generative AI applications using low-code visual workflows.","url":"https://junglewise.ai/threats/technologies/langflow-ai-langflow"},"most_severe":[{"cve":"CVE-2026-55255","cvss":9.9,"epss":0.0089,"slug":"cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow","title":"Langflow IDOR in responses endpoint allows cross-user flow execution","severity":"critical","exploited":true,"published_at":"2026-06-23T17:17:08.05+00:00","url":"https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow"},{"cve":"CVE-2025-3248","cvss":4,"epss":0.9999,"slug":"cve-2025-3248-langflow-missing-authentication-vulnerability","title":"Langflow Unauth RCE","severity":"critical","exploited":true,"published_at":"2025-06-17T20:14:26+00:00","url":"https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability"},{"cve":"CVE-2026-105740","cvss":9.9,"slug":"cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow command injection in MCP server configuration","severity":"critical","exploited":false,"published_at":"2026-10-05T21:16:35.567+00:00","url":"https://junglewise.ai/threats/cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-27966","cvss":9.8,"epss":0.3525,"slug":"cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python","title":"Langflow has Remote Code Execution in CSV Agent","severity":"critical","exploited":false,"published_at":"2026-02-27T15:47:29+00:00","url":"https://junglewise.ai/threats/cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python"},{"cve":"CVE-2026-51886","cvss":8.8,"epss":0.004,"slug":"cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the","title":"langflow code injection in validate endpoint","severity":"high","exploited":false,"published_at":"2026-10-01T22:17:03.387+00:00","url":"https://junglewise.ai/threats/cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the"},{"cve":"CVE-2025-68478","cvss":7.1,"epss":0.0579,"slug":"cve-2025-68478-langflow-arbitrary-file-write-via-fs-path-parameter","title":"Langflow arbitrary file write via fs_path parameter","severity":"high","exploited":false,"published_at":"2025-12-19T18:15:51.623+00:00","url":"https://junglewise.ai/threats/cve-2025-68478-langflow-arbitrary-file-write-via-fs-path-parameter"},{"cve":"CVE-2026-105741","cvss":7.1,"epss":0.0021,"slug":"cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow IP spoofing in MCP configuration installation","severity":"high","exploited":false,"published_at":"2026-10-05T21:16:35.74+00:00","url":"https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-105699","cvss":4,"epss":0.0025,"slug":"cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow path traversal and cross-user disclosure in MCP resources","severity":"high","exploited":false,"published_at":"2026-10-05T21:16:35.41+00:00","url":"https://junglewise.ai/threats/cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"slug":"duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9","title":"Langflow code injection in validate_code endpoint","severity":"high","exploited":false,"published_at":"2026-10-02T00:31:30+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9"},{"cve":"CVE-2026-51888","epss":0.0023,"slug":"cve-2026-51888-langflow-ai-langflow-v1-8-4-is-affected-by-directory-traversal","title":"langflow directory traversal in knowledge base creation","severity":"info","exploited":false,"published_at":"2026-10-01T22:17:03.527+00:00","url":"https://junglewise.ai/threats/cve-2026-51888-langflow-ai-langflow-v1-8-4-is-affected-by-directory-traversal"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}