Search for packages
| purl | pkg:pypi/langflow@1.8.3rc0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-78
Aliases: CVE-2026-33053 GHSA-rf6x-r45m-xv3w |
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the delete_api_key_route() endpoint … |
Vulnerable |
|
PYSEC-2026-80
Aliases: CVE-2026-33484 GHSA-7grx-3xcx-2xv5 |
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.0 through 1.8.1, the `/api/v1/files/images/{flow_id}/{file_name}` endpoint … |
Vulnerable |
|
PYSEC-2026-82
Aliases: CVE-2026-33873 GHSA-v8hw-mh8c-jxfc |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assistant feature … |
Vulnerable |
|
PYSEC-2026-79
Aliases: CVE-2026-33309 GHSA-g2j9-7rj2-gm6c |
Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of … |
Vulnerable |
|
PYSEC-2026-221
Aliases: CVE-2026-55255 GHSA-qrpv-q767-xqq2 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, an Insecure Direct Object Reference … |
Vulnerable |
|
PYSEC-2026-224
Aliases: CVE-2026-55450 GHSA-x223-p2gf-v735 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any … |
Vulnerable |
|
PYSEC-2026-242
Aliases: CVE-2026-33760 GHSA-9c59-2mvc-vfr8 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router exposes 7 … |
Vulnerable |
|
PYSEC-2026-243
Aliases: CVE-2026-48519 GHSA-v5ff-9q35-q26f |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public … |
Vulnerable |
|
PYSEC-2026-244
Aliases: CVE-2026-48520 GHSA-rcjh-r59h-gq37 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public … |
Vulnerable |
|
PYSEC-2026-377
Aliases: CVE-2026-42048 GHSA-9whx-c884-c68q |
Langflow Knowledge Bases API is Vulnerable to Path Traversal ## Summary Langflow is vulnerable to Path Traversal in the Knowledge … |
Vulnerable |
|
PYSEC-2026-379
Aliases: CVE-2026-33017 GHSA-vwmf-pq79-vjvx |
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint ## Summary The `POST /api/v1/build_public_tmp/{flow_id}/flow` endpoint allows building public … |
Vulnerable |
|
PYSEC-2026-378
Aliases: CVE-2026-55447 GHSA-ccv6-r384-xp75 |
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit ### Summary All components based on `BaseFileComponent` are vulnerable to the … |
Vulnerable |
|
GHSA-qrpv-q767-xqq2
Aliases: CVE-2026-55255 |
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow ## Summary Insecure Direct Object Reference … |
Vulnerable Vulnerable |
|
PYSEC-2026-2568
Aliases: CVE-2026-6598 GHSA-9jpj-cph8-w449 |
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint A security vulnerability has been detected in langflow-ai langflow up … |
Vulnerable |
|
PYSEC-2026-2565
Aliases: CVE-2026-6597 GHSA-5jjf-wcvf-923w |
Langflow has an Information Leak through Incomplete API Key Redaction A weakness has been identified in langflow-ai langflow up to … | There are no reported fixed by versions. |
|
PYSEC-2026-2566
Aliases: CVE-2026-42867 GHSA-79ph-745m-6wxq |
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint ## Summary Langflow is vulnerable to Path Traversal in the … |
Vulnerable |
|
PYSEC-2026-2569
Aliases: CVE-2026-6599 GHSA-v66p-f7x3-4794 |
Langflow vulnerable to injection A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function … | There are no reported fixed by versions. |
|
GHSA-jxw3-mjmx-3pqm
Aliases: CVE-2026-9205 |
Langflow: Weak Fernet Key via random.seed() ### Summary Langflow uses Python's `random` module (Mersenne Twister, a non-cryptographic PRNG) seeded with … |
Vulnerable |
|
GHSA-j8f7-x8jm-wmm4
|
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, … |
Vulnerable |
|
GHSA-qqw9-2vj9-hx7r
|
Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-hhxr-7j22-694r
|
Duplicate Advisory: Prompt injection in Langflow Smart Transform can lead to code execution ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-9cc5-j3qq-69gv
|
Duplicate Advisory: Unauthenticated Flow Execution via Webhook Authentication Bypass ## Duplicate Advisory This advisory has been withdrawn because it is … | There are no reported fixed by versions. |
|
GHSA-9pw3-x84f-xcwf
|
Duplicate Advisory: Langflow: Weak Fernet Key via random.seed() ## Duplicate Advisory This advisory has been withdrawn because it is a … | There are no reported fixed by versions. |
|
PYSEC-2026-4229
Aliases: CVE-2026-105741 GHSA-4f6c-2vvp-gw82 |
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write **Description**: ### Summary An IP spoofing vulnerability in the Model … |
Vulnerable |
|
PYSEC-2026-4236
Aliases: CVE-2026-51886 GHSA-w584-2h2r-2hvf |
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description ###Summary: A critical Authenticated Remote Code Execution (RCE) … |
Vulnerable |
|
PYSEC-2026-4234
Aliases: CVE-2026-105698 GHSA-gh98-4phw-6fmw PYSEC-2026-4238 |
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints ### Summary Before **Langflow 1.10.1**, two deprecated but … |
Vulnerable |
|
PYSEC-2026-4232
Aliases: CVE-2026-7700 GHSA-9fpm-3445-2vx4 |
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution ## Summary Langflow versions 1.3.0 through 1.10.2 contain … |
Vulnerable |
|
PYSEC-2026-4235
Aliases: CVE-2026-9205 GHSA-jxw3-mjmx-3pqm |
Langflow: Weak Fernet Key via random.seed() ### Summary Langflow uses Python's `random` module (Mersenne Twister, a non-cryptographic PRNG) seeded with … |
Vulnerable |
|
PYSEC-2026-4231
Aliases: CVE-2026-10561 GHSA-8qpj-27x8-pwpq |
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation ### Summary Langflow's built-in Python interpreter components — … |
Vulnerable |
|
PYSEC-2026-4237
Aliases: CVE-2026-105697 GHSA-w794-rj3p-xv45 PYSEC-2026-4239 PYSEC-2026-4241 |
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration ### Summary Before **Langflow 1.10.3**, the MCP … |
Vulnerable |
|
PYSEC-2026-4233
Aliases: CVE-2026-8505 GHSA-cf6m-vc3m-7cgm |
Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass ### Summary A vulnerability in Langflow's webhook authentication logic allows unauthenticated users … |
Vulnerable |
|
PYSEC-2026-4230
Aliases: CVE-2026-105699 GHSA-4hmc-cfm3-w43c |
Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers ### Summary Langflow's project-scoped MCP transport authenticates the caller … |
Vulnerable |
|
GHSA-v798-mcc6-2m3m
Aliases: CVE-2026-7873 |
Langflow: Code Injection Vulnerability in Code Validation Endpoint IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary … |
Vulnerable |