# Langflow-Ai vulnerabilities Source: https://junglewise.ai/threats/vendors/langflow-ai Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/langflow-ai.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 30 vulnerabilities in Langflow-Ai: 0 in the last 7 days and 6 in the last 90 days, 13 of them critical and 4 exploited in the wild. The most recent, CVE-2026-105741, was published on 5 October 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before. 0 critical against 1. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 6 - All time: 30 (13 critical, 4 exploited in the wild) ## Latest Langflow-Ai vulnerabilities - [CVE-2026-105741: Langflow IP spoofing in MCP configuration installation](https://junglewise.ai/threats/cve-2026-105741-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (high, CVSS 7.1, published 5 Oct 2026) - [CVE-2026-105740: Langflow command injection in MCP server configuration](https://junglewise.ai/threats/cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (critical, CVSS 9.9, published 5 Oct 2026) - [CVE-2026-105699: Langflow path traversal and cross-user disclosure in MCP resources](https://junglewise.ai/threats/cve-2026-105699-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (high, CVSS 4, published 5 Oct 2026) - [Langflow code injection in validate_code endpoint](https://junglewise.ai/threats/duplicate-advisory-title-authenticated-remote-code-execution-in-65a053a9) (high, published 2 Oct 2026) - [CVE-2026-51888: langflow directory traversal in knowledge base creation](https://junglewise.ai/threats/cve-2026-51888-langflow-ai-langflow-v1-8-4-is-affected-by-directory-traversal) (info, published 1 Oct 2026) - [CVE-2026-51886: langflow code injection in validate endpoint](https://junglewise.ai/threats/cve-2026-51886-langflow-ai-langflow-v1-9-3-is-affected-by-code-injection-the) (high, CVSS 8.8, published 1 Oct 2026) - [CVE-2026-55450: Langflow unauthenticated file upload and path disclosure in upload endpoint](https://junglewise.ai/threats/cve-2026-55450-langflow-unauthenticated-file-upload-and-path-disclosure-in) (critical, CVSS 9.3, published 23 Jun 2026) - [CVE-2026-55447: Langflow arbitrary file read and RCE via symlink following in BaseFileComponent](https://junglewise.ai/threats/cve-2026-55447-langflow-arbitrary-file-read-and-rce-via-symlink-following-in) (critical, CVSS 9.6, published 23 Jun 2026) - [CVE-2026-55446: Langflow unauthenticated denial of service in file upload](https://junglewise.ai/threats/cve-2026-55446-langflow-unauthenticated-denial-of-service-in-file-upload) (high, CVSS 7.5, published 23 Jun 2026) - [CVE-2026-55423: Langflow insufficient session expiration in logout mechanism](https://junglewise.ai/threats/cve-2026-55423-langflow-insufficient-session-expiration-in-logout-mechanism) (medium, CVSS 6.1, published 23 Jun 2026) - [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (critical, exploited in the wild, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-48520: Langflow arbitrary file read in Shareable Playground](https://junglewise.ai/threats/cve-2026-48520-langflow-arbitrary-file-read-in-shareable-playground) (medium, CVSS 6.1, published 23 Jun 2026) - [CVE-2026-48519: Langflow RCE in Shareable Playground via Public Flows API](https://junglewise.ai/threats/cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api) (critical, CVSS 9.6, published 23 Jun 2026) - [CVE-2026-42867: Langflow path traversal in Knowledge Bases API](https://junglewise.ai/threats/cve-2026-42867-langflow-path-traversal-in-knowledge-bases-api) (medium, CVSS 6.5, published 23 Jun 2026) - [CVE-2026-33760: Langflow IDOR in monitor API endpoints](https://junglewise.ai/threats/cve-2026-33760-langflow-idor-in-monitor-api-endpoints) (high, CVSS 8.8, published 23 Jun 2026) - [CVE-2026-12822: langflow-ai Langflow code injection in Bundle URL Loader](https://junglewise.ai/threats/cve-2026-12822-langflow-ai-langflow-code-injection-in-bundle-url-loader) (medium, CVSS 5.3, published 22 Jun 2026) - [CVE-2026-42048: Langflow path traversal in Knowledge Bases API bulk delete](https://junglewise.ai/threats/cve-2026-42048-langflow-path-traversal-in-knowledge-bases-api-bulk-delete) (critical, CVSS 9.6, published 12 May 2026) - [CVE-2026-6596: Langflow unrestricted file upload in API Endpoint](https://junglewise.ai/threats/cve-2026-6596-langflow-unrestricted-file-upload-in-api-endpoint) (high, CVSS 7.3, published 20 Apr 2026) - [CVE-2026-34046: Langflow authorization bypass in flow management API](https://junglewise.ai/threats/cve-2026-34046-langflow-authorization-bypass-in-flow-management-api) (high, CVSS 8.8, published 27 Mar 2026) - [CVE-2026-33873: Langflow authenticated code execution in Agentic Assistant validation](https://junglewise.ai/threats/cve-2026-33873-langflow-authenticated-code-execution-in-agentic-assistant) (critical, CVSS 4, published 26 Mar 2026) - [CVE-2026-33497: Langflow path traversal in profile picture endpoint](https://junglewise.ai/threats/cve-2026-33497-langflow-path-traversal-in-profile-picture-endpoint) (high, CVSS 4, published 20 Mar 2026) - [CVE-2026-33484: Langflow unauthenticated IDOR in image download endpoint](https://junglewise.ai/threats/cve-2026-33484-langflow-unauthenticated-idor-in-image-download-endpoint) (high, CVSS 7.5, published 20 Mar 2026) - [CVE-2026-33017: Langflow unauthenticated remote code execution in build_public_tmp endpoint](https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public) (critical, exploited in the wild, CVSS 9.8, published 20 Mar 2026) - [CVE-2026-33309: Langflow path traversal and arbitrary file write in v2 API](https://junglewise.ai/threats/cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api) (critical, CVSS 9.9, published 19 Mar 2026) - [CVE-2026-33053: Langflow IDOR in API key deletion endpoint](https://junglewise.ai/threats/cve-2026-33053-langflow-idor-in-api-key-deletion-endpoint) (high, CVSS 4, published 18 Mar 2026) ## Most severe Langflow-Ai vulnerabilities - [CVE-2026-55255: Langflow IDOR in responses endpoint allows cross-user flow execution](https://junglewise.ai/threats/cve-2026-55255-langflow-idor-in-responses-endpoint-allows-cross-user-flow) (critical, exploited in the wild, CVSS 9.9, published 23 Jun 2026) - [CVE-2026-33017: Langflow unauthenticated remote code execution in build_public_tmp endpoint](https://junglewise.ai/threats/cve-2026-33017-langflow-unauthenticated-remote-code-execution-in-build-public) (critical, exploited in the wild, CVSS 9.8, published 20 Mar 2026) - [CVE-2025-34291: Langflow CORS misconfiguration enables Account Takeover and RCE](https://junglewise.ai/threats/cve-2025-34291-langflow-cors-misconfiguration-and-account-takeover-leading-to) (critical, exploited in the wild, CVSS 8.8, published 6 Dec 2025) - [CVE-2025-3248: Langflow Unauth RCE](https://junglewise.ai/threats/cve-2025-3248-langflow-missing-authentication-vulnerability) (critical, exploited in the wild, CVSS 4, published 17 Jun 2025) - [CVE-2026-33309: Langflow path traversal and arbitrary file write in v2 API](https://junglewise.ai/threats/cve-2026-33309-langflow-path-traversal-and-arbitrary-file-write-in-v2-api) (critical, CVSS 9.9, published 19 Mar 2026) - [CVE-2026-105740: Langflow command injection in MCP server configuration](https://junglewise.ai/threats/cve-2026-105740-langflow-is-a-tool-for-building-and-deploying-ai-powered-agents) (critical, CVSS 9.9, published 5 Oct 2026) - [CVE-2026-27966: Langflow has Remote Code Execution in CSV Agent](https://junglewise.ai/threats/cve-2026-27966-langflow-csv-agent-remote-code-execution-via-hardcoded-python) (critical, CVSS 9.8, published 27 Feb 2026) - [CVE-2024-42835: Langflow remote code execution in PythonCodeTool](https://junglewise.ai/threats/cve-2024-42835-langflow-remote-code-execution-in-pythoncodetool) (critical, CVSS 9.8, published 31 Oct 2024) - [CVE-2026-48519: Langflow RCE in Shareable Playground via Public Flows API](https://junglewise.ai/threats/cve-2026-48519-langflow-rce-in-shareable-playground-via-public-flows-api) (critical, CVSS 9.6, published 23 Jun 2026) - [CVE-2026-55447: Langflow arbitrary file read and RCE via symlink following in BaseFileComponent](https://junglewise.ai/threats/cve-2026-55447-langflow-arbitrary-file-read-and-rce-via-symlink-following-in) (critical, CVSS 9.6, published 23 Jun 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 6 vulnerabilities in the four before. 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 3 | 0 | 0 | | 5 Oct 2026 | 3 | 1 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Langflow-Ai technologies - [Langflow-Ai Langflow](https://junglewise.ai/threats/technologies/langflow-ai-langflow): 10 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Langflow-Ai vulnerabilities", https://junglewise.ai/threats/vendors/langflow-ai, 9 November 2026.