Search for packages
| purl | pkg:pypi/langflow@1.9.6rc0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-244
Aliases: CVE-2026-48520 GHSA-rcjh-r59h-gq37 |
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public … |
Vulnerable |
|
GHSA-jxw3-mjmx-3pqm
Aliases: CVE-2026-9205 |
Langflow: Weak Fernet Key via random.seed() ### Summary Langflow uses Python's `random` module (Mersenne Twister, a non-cryptographic PRNG) seeded with … |
Vulnerable |
|
GHSA-j8f7-x8jm-wmm4
|
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, … |
Vulnerable |
|
GHSA-qqw9-2vj9-hx7r
|
Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-hhxr-7j22-694r
|
Duplicate Advisory: Prompt injection in Langflow Smart Transform can lead to code execution ## Duplicate Advisory This advisory has been … | There are no reported fixed by versions. |
|
GHSA-9pw3-x84f-xcwf
|
Duplicate Advisory: Langflow: Weak Fernet Key via random.seed() ## Duplicate Advisory This advisory has been withdrawn because it is a … | There are no reported fixed by versions. |
|
PYSEC-2026-4229
Aliases: CVE-2026-105741 GHSA-4f6c-2vvp-gw82 |
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write **Description**: ### Summary An IP spoofing vulnerability in the Model … |
Vulnerable |
|
PYSEC-2026-4236
Aliases: CVE-2026-51886 GHSA-w584-2h2r-2hvf |
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description ###Summary: A critical Authenticated Remote Code Execution (RCE) … |
Vulnerable |
|
PYSEC-2026-4234
Aliases: CVE-2026-105698 GHSA-gh98-4phw-6fmw PYSEC-2026-4238 |
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints ### Summary Before **Langflow 1.10.1**, two deprecated but … |
Vulnerable |
|
PYSEC-2026-4232
Aliases: CVE-2026-7700 GHSA-9fpm-3445-2vx4 |
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution ## Summary Langflow versions 1.3.0 through 1.10.2 contain … |
Vulnerable |
|
PYSEC-2026-4235
Aliases: CVE-2026-9205 GHSA-jxw3-mjmx-3pqm |
Langflow: Weak Fernet Key via random.seed() ### Summary Langflow uses Python's `random` module (Mersenne Twister, a non-cryptographic PRNG) seeded with … |
Vulnerable |
|
PYSEC-2026-4231
Aliases: CVE-2026-10561 GHSA-8qpj-27x8-pwpq |
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation ### Summary Langflow's built-in Python interpreter components — … |
Vulnerable |
|
PYSEC-2026-4237
Aliases: CVE-2026-105697 GHSA-w794-rj3p-xv45 PYSEC-2026-4239 PYSEC-2026-4241 |
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration ### Summary Before **Langflow 1.10.3**, the MCP … |
Vulnerable |
|
GHSA-v798-mcc6-2m3m
Aliases: CVE-2026-7873 |
Langflow: Code Injection Vulnerability in Code Validation Endpoint IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary … |
Vulnerable |