{"schema_version":1,"title":"Langflow-Ai vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 30 vulnerabilities in Langflow-Ai: 0 in the last 7 days and 6 in the last 90 days, 13 of them critical and 4 exploited in the wild. The most recent, CVE-2026-105741, was published on 5 October 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before. 0 critical against 1. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/langflow-ai","json_url":"https://junglewise.ai/threats/vendors/langflow-ai.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/langflow-ai","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":12,"all_time":30,"critical":13,"exploited":4,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":28},"latest":[{"cve":"CVE-2026-105741","cvss":7.1,"epss":0.0021,"slug":"cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow IP spoofing in MCP configuration installation","severity":"high","exploited":false,"published_at":"2026-10-05T21:16:35.74+00:00","url":"https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-105740","cvss":9.9,"slug":"cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow command injection in MCP server configuration","severity":"critical","exploited":false,"published_at":"2026-10-05T21:16:35.567+00:00","url":"https://junglewise.ai/threats/cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-105699","cvss":4,"epss":0.0025,"slug":"cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow path traversal and cross-user disclosure in MCP resources","severity":"high","exploited":false,"published_at":"2026-10-05T21:16:35.41+00:00","url":"https://junglewise.ai/threats/cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"slug":"duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9","title":"Langflow code injection in validate_code endpoint","severity":"high","exploited":false,"published_at":"2026-10-02T00:31:30+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9"},{"cve":"CVE-2026-51888","epss":0.0023,"slug":"cve-2026-51888-langflow-ai-langflow-v1-8-4-is-affected-by-directory-traversal","title":"langflow directory traversal in knowledge base creation","severity":"info","exploited":false,"published_at":"2026-10-01T22:17:03.527+00:00","url":"https://junglewise.ai/threats/cve-2026-51888-langflow-ai-langflow-v1-8-4-is-affected-by-directory-traversal"},{"cve":"CVE-2026-51886","cvss":8.8,"epss":0.004,"slug":"cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the","title":"langflow code injection in validate endpoint","severity":"high","exploited":false,"published_at":"2026-10-01T22:17:03.387+00:00","url":"https://junglewise.ai/threats/cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the"},{"cve":"CVE-2026-55450","cvss":9.3,"epss":0.0119,"slug":"cve-2026-55450-langflow-unauthenticated-file-upload-and-path-disclosure-in","title":"Langflow unauthenticated file upload and path disclosure in upload endpoint","severity":"critical","exploited":false,"published_at":"2026-06-23T17:17:08.663+00:00","url":"https://junglewise.ai/threats/cve-2026-55450-langflow-unauthenticated-file-upload-and-path-disclosure-in"},{"cve":"CVE-2026-55447","cvss":9.6,"epss":0.0066,"slug":"cve-2026-55447-langflow-arbitrary-file-read-and-rce-via-symlink-following-in","title":"Langflow arbitrary file read and RCE via symlink following in BaseFileComponent","severity":"critical","exploited":false,"published_at":"2026-06-23T17:17:08.54+00:00","url":"https://junglewise.ai/threats/cve-2026-55447-langflow-arbitrary-file-read-and-rce-via-symlink-following-in"},{"cve":"CVE-2026-55446","cvss":7.5,"epss":0.0058,"slug":"cve-2026-55446-langflow-unauthenticated-denial-of-service-in-file-upload","title":"Langflow unauthenticated denial of service in file upload","severity":"high","exploited":false,"published_at":"2026-06-23T17:17:08.41+00:00","url":"https://junglewise.ai/threats/cve-2026-55446-langflow-unauthenticated-denial-of-service-in-file-upload"},{"cve":"CVE-2026-55423","cvss":6.1,"epss":0.0022,"slug":"cve-2026-55423-langflow-insufficient-session-expiration-in-logout-mechanism","title":"Langflow insufficient session expiration in logout mechanism","severity":"medium","exploited":false,"published_at":"2026-06-23T17:17:08.283+00:00","url":"https://junglewise.ai/threats/cve-2026-55423-langflow-insufficient-session-expiration-in-logout-mechanism"},{"cve":"CVE-2026-55255","cvss":9.9,"epss":0.0089,"slug":"cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow","title":"Langflow IDOR in responses endpoint allows cross-user flow execution","severity":"critical","exploited":true,"published_at":"2026-06-23T17:17:08.05+00:00","url":"https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow"},{"cve":"CVE-2026-48520","cvss":6.1,"epss":0.0044,"slug":"cve-2026-48520-langflow-arbitrary-file-read-in-shareable-playground","title":"Langflow arbitrary file read in Shareable Playground","severity":"medium","exploited":false,"published_at":"2026-06-23T17:17:01.367+00:00","url":"https://junglewise.ai/threats/cve-2026-48520-langflow-arbitrary-file-read-in-shareable-playground"},{"cve":"CVE-2026-48519","cvss":9.6,"epss":0.0078,"slug":"cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api","title":"Langflow RCE in Shareable Playground via Public Flows API","severity":"critical","exploited":false,"published_at":"2026-06-23T17:17:01.24+00:00","url":"https://junglewise.ai/threats/cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api"},{"cve":"CVE-2026-42867","cvss":6.5,"epss":0.0047,"slug":"cve-2026-42867-langflow-path-traversal-in-knowledge-bases-api","title":"Langflow path traversal in Knowledge Bases API","severity":"medium","exploited":false,"published_at":"2026-06-23T17:16:58.857+00:00","url":"https://junglewise.ai/threats/cve-2026-42867-langflow-path-traversal-in-knowledge-bases-api"},{"cve":"CVE-2026-33760","cvss":8.8,"epss":0.005,"slug":"cve-2026-33760-langflow-idor-in-monitor-api-endpoints","title":"Langflow IDOR in monitor API endpoints","severity":"high","exploited":false,"published_at":"2026-06-23T17:16:52.79+00:00","url":"https://junglewise.ai/threats/cve-2026-33760-langflow-idor-in-monitor-api-endpoints"},{"cve":"CVE-2026-12822","cvss":5.3,"slug":"cve-2026-12822-langflow-ai-langflow-code-injection-in-bundle-url-loader","title":"langflow-ai Langflow code injection in Bundle URL Loader","severity":"medium","exploited":false,"published_at":"2026-06-22T00:16:42.103+00:00","url":"https://junglewise.ai/threats/cve-2026-12822-langflow-ai-langflow-code-injection-in-bundle-url-loader"},{"cve":"CVE-2026-42048","cvss":9.6,"epss":0.006,"slug":"cve-2026-42048-langflow-path-traversal-in-knowledge-bases-api-bulk-delete","title":"Langflow path traversal in Knowledge Bases API bulk delete","severity":"critical","exploited":false,"published_at":"2026-05-12T18:17:23.78+00:00","url":"https://junglewise.ai/threats/cve-2026-42048-langflow-path-traversal-in-knowledge-bases-api-bulk-delete"},{"cve":"CVE-2026-6596","cvss":7.3,"epss":0.0047,"slug":"cve-2026-6596-langflow-unrestricted-file-upload-in-api-endpoint","title":"Langflow unrestricted file upload in API Endpoint","severity":"high","exploited":false,"published_at":"2026-04-20T03:34:42+00:00","url":"https://junglewise.ai/threats/cve-2026-6596-langflow-unrestricted-file-upload-in-api-endpoint"},{"cve":"CVE-2026-34046","cvss":8.8,"epss":0.0068,"slug":"cve-2026-34046-langflow-authorization-bypass-in-flow-management-api","title":"Langflow authorization bypass in flow management API","severity":"high","exploited":false,"published_at":"2026-03-27T21:17:27.753+00:00","url":"https://junglewise.ai/threats/cve-2026-34046-langflow-authorization-bypass-in-flow-management-api"},{"cve":"CVE-2026-33873","cvss":4,"epss":0.0182,"slug":"cve-2026-33873-langflow-authenticated-code-execution-in-agentic-assistant","title":"Langflow authenticated code execution in Agentic Assistant validation","severity":"critical","exploited":false,"published_at":"2026-03-26T18:31:36+00:00","url":"https://junglewise.ai/threats/cve-2026-33873-langflow-authenticated-code-execution-in-agentic-assistant"},{"cve":"CVE-2026-33497","cvss":4,"epss":0.0203,"slug":"cve-2026-33497-langflow-path-traversal-in-profile-picture-endpoint","title":"Langflow path traversal in profile picture endpoint","severity":"high","exploited":false,"published_at":"2026-03-20T20:56:14+00:00","url":"https://junglewise.ai/threats/cve-2026-33497-langflow-path-traversal-in-profile-picture-endpoint"},{"cve":"CVE-2026-33484","cvss":7.5,"epss":0.0056,"slug":"cve-2026-33484-langflow-unauthenticated-idor-in-image-download-endpoint","title":"Langflow unauthenticated IDOR in image download endpoint","severity":"high","exploited":false,"published_at":"2026-03-20T20:47:10+00:00","url":"https://junglewise.ai/threats/cve-2026-33484-langflow-unauthenticated-idor-in-image-download-endpoint"},{"cve":"CVE-2026-33017","cvss":9.8,"epss":0.2476,"slug":"cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public","title":"Langflow unauthenticated remote code execution in build_public_tmp endpoint","severity":"critical","exploited":true,"published_at":"2026-03-20T05:16:15.55+00:00","url":"https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public"},{"cve":"CVE-2026-33309","cvss":9.9,"epss":0.0105,"slug":"cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api","title":"Langflow path traversal and arbitrary file write in v2 API","severity":"critical","exploited":false,"published_at":"2026-03-19T17:46:43+00:00","url":"https://junglewise.ai/threats/cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api"},{"cve":"CVE-2026-33053","cvss":4,"epss":0.0052,"slug":"cve-2026-33053-langflow-idor-in-api-key-deletion-endpoint","title":"Langflow IDOR in API key deletion endpoint","severity":"high","exploited":false,"published_at":"2026-03-18T12:58:35+00:00","url":"https://junglewise.ai/threats/cve-2026-33053-langflow-idor-in-api-key-deletion-endpoint"}],"vendor":{"hub":true,"name":"Langflow-Ai","slug":"langflow-ai","url":"https://junglewise.ai/threats/vendors/langflow-ai"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-05","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-55255","cvss":9.9,"epss":0.0089,"slug":"cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow","title":"Langflow IDOR in responses endpoint allows cross-user flow execution","severity":"critical","exploited":true,"published_at":"2026-06-23T17:17:08.05+00:00","url":"https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow"},{"cve":"CVE-2026-33017","cvss":9.8,"epss":0.2476,"slug":"cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public","title":"Langflow unauthenticated remote code execution in build_public_tmp endpoint","severity":"critical","exploited":true,"published_at":"2026-03-20T05:16:15.55+00:00","url":"https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public"},{"cve":"CVE-2025-34291","cvss":8.8,"epss":0.9281,"slug":"cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to","title":"Langflow CORS misconfiguration enables Account Takeover and RCE","severity":"critical","exploited":true,"published_at":"2025-12-06T00:31:36+00:00","url":"https://junglewise.ai/threats/cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to"},{"cve":"CVE-2025-3248","cvss":4,"epss":0.9999,"slug":"cve-2025-3248-langflow-missing-authentication-vulnerability","title":"Langflow Unauth RCE","severity":"critical","exploited":true,"published_at":"2025-06-17T20:14:26+00:00","url":"https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability"},{"cve":"CVE-2026-33309","cvss":9.9,"epss":0.0105,"slug":"cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api","title":"Langflow path traversal and arbitrary file write in v2 API","severity":"critical","exploited":false,"published_at":"2026-03-19T17:46:43+00:00","url":"https://junglewise.ai/threats/cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api"},{"cve":"CVE-2026-105740","cvss":9.9,"slug":"cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents","title":"Langflow command injection in MCP server configuration","severity":"critical","exploited":false,"published_at":"2026-10-05T21:16:35.567+00:00","url":"https://junglewise.ai/threats/cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents"},{"cve":"CVE-2026-27966","cvss":9.8,"epss":0.3525,"slug":"cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python","title":"Langflow has Remote Code Execution in CSV Agent","severity":"critical","exploited":false,"published_at":"2026-02-27T15:47:29+00:00","url":"https://junglewise.ai/threats/cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python"},{"cve":"CVE-2024-42835","cvss":9.8,"epss":0.0116,"slug":"cve-2024-42835-langflow-remote-code-execution-in-pythoncodetool","title":"Langflow remote code execution in PythonCodeTool","severity":"critical","exploited":false,"published_at":"2024-10-31T15:30:59+00:00","url":"https://junglewise.ai/threats/cve-2024-42835-langflow-remote-code-execution-in-pythoncodetool"},{"cve":"CVE-2026-48519","cvss":9.6,"epss":0.0078,"slug":"cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api","title":"Langflow RCE in Shareable Playground via Public Flows API","severity":"critical","exploited":false,"published_at":"2026-06-23T17:17:01.24+00:00","url":"https://junglewise.ai/threats/cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api"},{"cve":"CVE-2026-55447","cvss":9.6,"epss":0.0066,"slug":"cve-2026-55447-langflow-arbitrary-file-read-and-rce-via-symlink-following-in","title":"Langflow arbitrary file read and RCE via symlink following in BaseFileComponent","severity":"critical","exploited":false,"published_at":"2026-06-23T17:17:08.54+00:00","url":"https://junglewise.ai/threats/cve-2026-55447-langflow-arbitrary-file-read-and-rce-via-symlink-following-in"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Langflow-Ai Langflow","slug":"langflow-ai-langflow","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/langflow-ai-langflow"}]}