CVE security advisories and vulnerability history for langflow by langflow-ai.
Last updated
langflow-ai langflow has 37 published CVE records since 2024, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting langflow-ai langflow, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of langflow-ai langflow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
3
3 of langflow-ai langflow's CVEs are confirmed exploited in the wild.
Public exploits
25
25 of langflow-ai langflow's CVEs have a known public exploit available.
Browse every langflow-ai langflow version named in a CVE, then pick one to see only the CVEs that affect it.
37 CVEs
Added to CISA KEV 2026-03-25
Added to CISA KEV 2026-05-21
Showing 30 of 37
The CWE weakness categories most often found in langflow-ai langflow CVEs. Follow any weakness for its full explanation.
How many langflow-ai langflow CVEs were published each year.
Browse vulnerabilities for other products by langflow-ai.
Common questions about langflow-ai langflow vulnerabilities.
langflow-ai langflow has 37 published CVE records since 2024.
Yes — 3 of langflow-ai langflow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 25 of langflow-ai langflow's CVEs have a known public exploit.
827 distinct langflow-ai langflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
langflow-ai langflow's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-862 (Missing Authorization), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-306 (Missing Authentication for Critical Function).
langflow-ai langflow has 13 critical and 14 high-severity CVEs.
The average CVSS base score across langflow-ai langflow's scored CVEs is 8.0.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new langflow-ai langflow vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
