Search for packages
| purl | pkg:pypi/langflow@1.0.0rc1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-c995-4fw3-j39m
|
Duplicate Advisory: Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint ### Duplicate Advisory This advisory has been withdrawn because … |
Vulnerable |
|
GHSA-f43r-cc68-gpx4
Aliases: CVE-2025-68478 |
External Control of File Name or Path in Langflow **Vulnerability Overview** If an arbitrary path is specified in the request … |
Vulnerable |
|
GHSA-4gv9-mp8m-592r
Aliases: CVE-2025-57760 |
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) This vulnerability was discovered by researchers at **Check Point**. We … |
Vulnerable |
|
GHSA-qg33-x2c5-6p44
Aliases: CVE-2024-37014 |
Langflow remote code execution vulnerability Langflow allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" … |
Vulnerable |
|
GHSA-8c4j-f57c-35cf
Aliases: CVE-2026-34046 |
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check ## Vulnerability ### IDOR in `GET/PATCH/DELETE … |
Vulnerable |
|
GHSA-v8hw-mh8c-jxfc
Aliases: CVE-2026-33873 |
Langflow has Authenticated Code Execution in Agentic Assistant Validation ## Description ### 1. Summary The Agentic Assistant feature in Langflow … |
Vulnerable |
|
GHSA-vwmf-pq79-vjvx
Aliases: CVE-2026-33017 |
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint ## Summary The `POST /api/v1/build_public_tmp/{flow_id}/flow` endpoint allows building public … |
Vulnerable |
|
GHSA-c5cp-vx83-jhqx
Aliases: CVE-2026-21445 |
Langflow Missing Authentication on Critical API Endpoints ### Summary Multiple critical API endpoints in Langflow are missing authentication controls, allowing … |
Vulnerable |
|
PYSEC-2026-81
Aliases: CVE-2026-33497 GHSA-ph9w-r52h-28p7 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the download_profile_picture function … |
Vulnerable |
|
PYSEC-2025-78
Aliases: CVE-2025-34291 GHSA-577h-p2hh-v4mv |
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An … |
Vulnerable |
|
PYSEC-2026-78
Aliases: CVE-2026-33053 GHSA-rf6x-r45m-xv3w |
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the delete_api_key_route() endpoint … |
Vulnerable |
|
PYSEC-2026-82
Aliases: CVE-2026-33873 GHSA-v8hw-mh8c-jxfc |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature … |
Vulnerable |
|
PYSEC-2024-279
Aliases: CVE-2024-42835 GHSA-56m6-4mhw-h3g5 |
langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component. | There are no reported fixed by versions. |
|
PYSEC-2025-125
Aliases: CVE-2025-68478 GHSA-f43r-cc68-gpx4 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path … |
Vulnerable |
|
PYSEC-2025-36
Aliases: CVE-2025-3248 GHSA-rvqx-wpfh-mfx7 PYSEC-2026-380 |
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can … |
Vulnerable |
|
PYSEC-2026-221
Aliases: CVE-2026-55255 GHSA-qrpv-q767-xqq2 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, an Insecure Direct Object Reference … |
Vulnerable |
|
PYSEC-2026-224
Aliases: CVE-2026-55450 GHSA-x223-p2gf-v735 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any … |
Vulnerable |
|
PYSEC-2026-223
Aliases: CVE-2026-55446 GHSA-qwqc-p3q8-wcg9 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a … |
Vulnerable |
|
PYSEC-2026-222
Aliases: CVE-2026-55423 GHSA-7hw8-6q6r-4276 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not … |
Vulnerable |
|
PYSEC-2026-242
Aliases: CVE-2026-33760 GHSA-9c59-2mvc-vfr8 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router exposes 7 … |
Vulnerable |
|
PYSEC-2026-243
Aliases: CVE-2026-48519 GHSA-v5ff-9q35-q26f |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public … |
Vulnerable |
|
PYSEC-2026-244
Aliases: CVE-2026-48520 GHSA-rcjh-r59h-gq37 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public … |
Vulnerable |
|
PYSEC-2026-377
Aliases: CVE-2026-42048 GHSA-9whx-c884-c68q |
Langflow Knowledge Bases API is Vulnerable to Path Traversal ## Summary Langflow is vulnerable to Path Traversal in the Knowledge … |
Vulnerable |
|
PYSEC-2026-379
Aliases: CVE-2026-33017 GHSA-vwmf-pq79-vjvx |
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint ## Summary The `POST /api/v1/build_public_tmp/{flow_id}/flow` endpoint allows building public … |
Vulnerable |
|
PYSEC-2026-376
Aliases: CVE-2026-27966 GHSA-3645-fxcv-hqr4 |
Langflow has Remote Code Execution in CSV Agent # 1. Summary The CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which … | There are no reported fixed by versions. |
|
PYSEC-2026-378
Aliases: CVE-2026-55447 GHSA-ccv6-r384-xp75 |
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit ### Summary All components based on `BaseFileComponent` are vulnerable to the … |
Vulnerable |
|
GHSA-qrpv-q767-xqq2
Aliases: CVE-2026-55255 |
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow ## Summary Insecure Direct Object Reference … |
Vulnerable Vulnerable |
|
CVE-2025-57760
Aliases: GHSA-4gv9-mp8m-592r |
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) A privilege escalation vulnerability exists in Langflow containers where an … |
Vulnerable Vulnerable |
|
PYSEC-2026-2568
Aliases: CVE-2026-6598 GHSA-9jpj-cph8-w449 |
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint A security vulnerability has been detected in langflow-ai langflow up … |
Vulnerable |
|
PYSEC-2026-1525
Aliases: CVE-2026-0770 GHSA-g22f-v6f7-2hrh |
Langflow affected by Remote Code Execution via validate_code() exec() Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code … | There are no reported fixed by versions. |
|
PYSEC-2026-1521
Aliases: CVE-2024-9277 GHSA-355v-2rjx-fpx7 |
Inefficient Regular Expression Complexity in langflow A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by … | There are no reported fixed by versions. |
|
PYSEC-2026-1523
Aliases: CVE-2024-48061 GHSA-5p5r-57fx-pmfr |
Langflow vulnerable to remote code execution langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the … | There are no reported fixed by versions. |
|
PYSEC-2026-1522
Aliases: CVE-2025-68477 GHSA-5993-7p27-66g5 |
Langflow vulnerable to Server-Side Request Forgery **Vulnerability Overview** Langflow provides an API Request component that can issue arbitrary HTTP requests … |
Vulnerable |
|
PYSEC-2025-243
Aliases: CVE-2025-57760 GHSA-4gv9-mp8m-592r PYSEC-2026-1526 |
Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exists in Langflow containers … |
Vulnerable |
|
PYSEC-2026-2565
Aliases: CVE-2026-6597 GHSA-5jjf-wcvf-923w |
Langflow has an Information Leak through Incomplete API Key Redaction A weakness has been identified in langflow-ai langflow up to … | There are no reported fixed by versions. |
|
PYSEC-2026-1524
Aliases: CVE-2026-21445 GHSA-c5cp-vx83-jhqx PYSEC-2026-2571 |
Langflow Missing Authentication on Critical API Endpoints ### Summary Multiple critical API endpoints in Langflow are missing authentication controls, allowing … |
Vulnerable |
|
PYSEC-2026-2567
Aliases: CVE-2026-34046 GHSA-8c4j-f57c-35cf PYSEC-2026-2570 |
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check ## Vulnerability ### IDOR in `GET/PATCH/DELETE … |
Vulnerable |
|
PYSEC-2026-2566
Aliases: CVE-2026-42867 GHSA-79ph-745m-6wxq |
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint ## Summary Langflow is vulnerable to Path Traversal in the … |
Vulnerable |
|
PYSEC-2026-2569
Aliases: CVE-2026-6599 GHSA-v66p-f7x3-4794 |
Langflow vulnerable to injection A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function … | There are no reported fixed by versions. |
|
GHSA-jxw3-mjmx-3pqm
Aliases: CVE-2026-9205 |
Langflow: Weak Fernet Key via random.seed() ### Summary Langflow uses Python's `random` module (Mersenne Twister, a non-cryptographic PRNG) seeded with … |
Vulnerable |
|
GHSA-j8f7-x8jm-wmm4
|
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, … |
Vulnerable |
|
GHSA-9pw3-x84f-xcwf
|
Duplicate Advisory: Langflow: Weak Fernet Key via random.seed() ## Duplicate Advisory This advisory has been withdrawn because it is a … | There are no reported fixed by versions. |
|
PYSEC-2026-4235
Aliases: CVE-2026-9205 GHSA-jxw3-mjmx-3pqm |
Langflow: Weak Fernet Key via random.seed() ### Summary Langflow uses Python's `random` module (Mersenne Twister, a non-cryptographic PRNG) seeded with … |
Vulnerable |
|
PYSEC-2026-4231
Aliases: CVE-2026-10561 GHSA-8qpj-27x8-pwpq |
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation ### Summary Langflow's built-in Python interpreter components — … |
Vulnerable |