# langflow (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/pypi-langflow Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/pypi-langflow.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 48 vulnerabilities in langflow (PyPI): 0 in the last 7 days and 7 in the last 90 days, 19 of them critical and 5 exploited in the wild. The most recent, Langflow SSRF in URL-taking components, was published on 6 October 2026. Nothing in the last four weeks, down from 7 vulnerabilities in the four before. 0 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 7 - All time: 48 (19 critical, 5 exploited in the wild) ## About langflow (PyPI) Python framework for building and deploying language model applications with visual workflows. ## Latest langflow (PyPI) vulnerabilities - [Langflow SSRF in URL-taking components](https://junglewise.ai/threats/langflow-ssrf-in-url-taking-components-protection-disabled-by-default-db7cac37) (medium, published 6 Oct 2026) - [CVE-2026-105741: Langflow IP spoofing in MCP configuration installation](https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (high, CVSS 7.1, published 5 Oct 2026) - [CVE-2026-105699: Langflow path traversal and cross-user disclosure in MCP resources](https://junglewise.ai/threats/cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (high, CVSS 4, published 5 Oct 2026) - [CVE-2026-105698: Langflow authorization bypass in flow API endpoints](https://junglewise.ai/threats/cve-2026-105698-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (medium, CVSS 5.4, published 5 Oct 2026) - [CVE-2026-105697: Langflow MCP stdio command injection](https://junglewise.ai/threats/cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (critical, CVSS 9.9, published 5 Oct 2026) - [Langflow code injection in validate_code endpoint](https://junglewise.ai/threats/duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9) (high, published 2 Oct 2026) - [CVE-2026-51886: langflow code injection in validate endpoint](https://junglewise.ai/threats/cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the) (high, CVSS 8.8, published 1 Oct 2026) - [Duplicate Advisory: Langflow: Weak Fernet Key via random.seed()](https://junglewise.ai/threats/duplicate-advisory-langflow-weak-fernet-key-via-random-seed-f6da180f) (high, CVSS 7.4, published 5 Aug 2026) - [CVE-2026-9205: IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.](https://junglewise.ai/threats/cve-2026-9205-langflow-weak-fernet-key-via-random-seed) (critical, CVSS 9.1, published 5 Aug 2026) - [Duplicate Advisory: Unauthenticated Flow Execution via Webhook Authentication Bypass](https://junglewise.ai/threats/duplicate-advisory-unauthenticated-flow-execution-via-webhook-8196a1a4) (critical, CVSS 9.8, published 17 Jul 2026) - [CVE-2026-8505: IBM Langflow OSS authentication bypass in webhook logic](https://junglewise.ai/threats/cve-2026-8505-ibm-langflow-oss-authentication-bypass-in-webhook-logic) (critical, CVSS 9.8, published 17 Jul 2026) - [CVE-2026-21445: PYSEC-2026-2571 - Langflow Missing Authentication on Critical API Endpoints](https://junglewise.ai/threats/cve-2026-21445-langflow-missing-authentication-on-critical-api-endpoints) (medium, CVSS 4, published 13 Jul 2026) - [CVE-2025-57760: PYSEC-2026-1526 - Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)](https://junglewise.ai/threats/cve-2025-57760-langflow-vulnerable-to-privilege-escalation-via-cli-superuser) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-48061: PYSEC-2026-1523 - Langflow vulnerable to remote code execution](https://junglewise.ai/threats/cve-2024-48061-langflow-vulnerable-to-remote-code-execution) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-9277: PYSEC-2026-1521 - Inefficient Regular Expression Complexity in langflow](https://junglewise.ai/threats/cve-2024-9277-langflow-inefficient-regular-expression-complexity-in-http-post) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2026-7873: IBM Langflow OSS code injection in code validation endpoint](https://junglewise.ai/threats/cve-2026-7873-ibm-langflow-oss-code-injection-in-code-validation-endpoint) (critical, CVSS 9.9, published 30 Jun 2026) - [CVE-2026-55450: Langflow unauthenticated file upload and path disclosure in upload endpoint](https://junglewise.ai/threats/cve-2026-55450-langflow-unauthenticated-file-upload-and-path-disclosure-in) (critical, CVSS 9.3, published 23 Jun 2026) - [CVE-2026-55447: Langflow arbitrary file read and RCE via symlink following in BaseFileComponent](https://junglewise.ai/threats/cve-2026-55447-langflow-arbitrary-file-read-and-rce-via-symlink-following-in) (critical, CVSS 9.6, published 23 Jun 2026) - [CVE-2026-55446: Langflow unauthenticated denial of service in file upload](https://junglewise.ai/threats/cve-2026-55446-langflow-unauthenticated-denial-of-service-in-file-upload) (high, CVSS 7.5, published 23 Jun 2026) - [CVE-2026-55423: Langflow insufficient session expiration in logout mechanism](https://junglewise.ai/threats/cve-2026-55423-langflow-insufficient-session-expiration-in-logout-mechanism) (medium, CVSS 6.1, published 23 Jun 2026) - [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (critical, exploited in the wild, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-48520: Langflow arbitrary file read in Shareable Playground](https://junglewise.ai/threats/cve-2026-48520-langflow-arbitrary-file-read-in-shareable-playground) (medium, CVSS 6.1, published 23 Jun 2026) - [CVE-2026-48519: Langflow RCE in Shareable Playground via Public Flows API](https://junglewise.ai/threats/cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api) (critical, CVSS 9.6, published 23 Jun 2026) - [CVE-2026-42867: Langflow path traversal in Knowledge Bases API](https://junglewise.ai/threats/cve-2026-42867-langflow-path-traversal-in-knowledge-bases-api) (medium, CVSS 6.5, published 23 Jun 2026) - [CVE-2026-33760: Langflow IDOR in monitor API endpoints](https://junglewise.ai/threats/cve-2026-33760-langflow-idor-in-monitor-api-endpoints) (high, CVSS 8.8, published 23 Jun 2026) ## Most severe langflow (PyPI) vulnerabilities - [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (critical, exploited in the wild, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-0770: Langflow remote code execution in validate endpoint](https://junglewise.ai/threats/cve-2026-0770-langflow-remote-code-execution-in-validate-endpoint) (critical, exploited in the wild, CVSS 9.8, published 23 Jan 2026) - [CVE-2026-33017: Langflow unauthenticated remote code execution in build_public_tmp endpoint](https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public) (critical, exploited in the wild, CVSS 9.8, published 20 Mar 2026) - [CVE-2025-34291: Langflow CORS misconfiguration enables Account Takeover and RCE](https://junglewise.ai/threats/cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to) (critical, exploited in the wild, CVSS 8.8, published 6 Dec 2025) - [CVE-2025-3248: Langflow Unauth RCE](https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability) (critical, exploited in the wild, CVSS 4, published 17 Jun 2025) - [CVE-2026-10561: IBM Langflow OSS remote code execution in PythonREPLComponent](https://junglewise.ai/threats/cve-2026-10561-ibm-langflow-oss-remote-code-execution-in-pythonreplcomponent) (critical, CVSS 10, published 22 Jun 2026) - [CVE-2026-7873: IBM Langflow OSS code injection in code validation endpoint](https://junglewise.ai/threats/cve-2026-7873-ibm-langflow-oss-code-injection-in-code-validation-endpoint) (critical, CVSS 9.9, published 30 Jun 2026) - [CVE-2026-33309: Langflow path traversal and arbitrary file write in v2 API](https://junglewise.ai/threats/cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api) (critical, CVSS 9.9, published 19 Mar 2026) - [CVE-2026-105697: Langflow MCP stdio command injection](https://junglewise.ai/threats/cve-2026-105697-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (critical, CVSS 9.9, published 5 Oct 2026) - [CVE-2026-27966: Langflow has Remote Code Execution in CSV Agent](https://junglewise.ai/threats/cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python) (critical, CVSS 9.8, published 27 Feb 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 7 vulnerabilities in the four before. 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 2 | 0 | 0 | | 5 Oct 2026 | 5 | 1 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "langflow (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/pypi-langflow, 13 November 2026.