How many langflow langflow desktop CVEs are in CISA KEV?

None of langflow langflow desktop's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of langflow langflow desktop are affected?

6 distinct langflow langflow desktop versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in langflow langflow desktop CVEs?

langflow langflow desktop's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

What is the average severity of langflow langflow desktop CVEs?

The average CVSS base score across langflow langflow desktop's scored CVEs is 6.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

langflow

7 CVEs

langflow desktop Vulnerabilities

Name: langflow desktop vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for langflow desktop by langflow.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.8

Avg CVSS

2026–2026

Last updated June 11, 2026

Overview

langflow desktop has 7 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting langflow desktop, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of langflow desktop's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of langflow desktop's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No langflow desktop CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every langflow desktop version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.0.0 <= v <= 1.8.43 CVEs
<= 1.8.41 CVE
1.0.0 <= v < 1.9.31 CVE
1.2.0 <= v <= 1.8.41 CVE
1.6.0 <= v <= 1.8.41 CVE

Fixed in

1.9.31 CVE

Find a version

7 CVEs

Sort

IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services
CVE-2026-3341
Patch
CWE-918
Medium · CVSS 5.4
EPSS 0.1% (4th pct)2026-06-11
Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
CVE-2026-6543
Patch
CWE-94
High · CVSS 8.8
EPSS 0.5% (38th pct)2026-04-30
Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint
CVE-2026-3345
Patch
CWE-22
Medium · CVSS 6.5
EPSS 0.4% (30th pct)2026-04-30
Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw
CVE-2026-3346
Patch
CWE-89
Medium · CVSS 6.4
EPSS 0.2% (5th pct)2026-04-30
Server-Side Request Forgery (SSRF) in Langflow URL Component
CVE-2026-3340
Patch
CWE-918
Medium · CVSS 6.5
EPSS 0.2% (6th pct)2026-04-30
Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API
CVE-2026-4502
Patch
CWE-22
Medium · CVSS 6.5
EPSS 0.3% (20th pct)2026-04-30
Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint
CVE-2026-4503
Patch
CWE-639
High · CVSS 7.5
EPSS 0.3% (27th pct)2026-04-30

Common weakness types

The CWE weakness categories most often found in langflow desktop CVEs. Follow any weakness for its full explanation.

Other langflow products

Browse vulnerabilities for other products by langflow.

langflow75 CVEs langflow-base1 CVEs

All langflow vulnerabilities

Frequently asked questions

Common questions about langflow desktop vulnerabilities.

How many CVEs does langflow langflow desktop have?: langflow langflow desktop has 7 published CVE records since 2026.
How many langflow langflow desktop CVEs are in CISA KEV?: None of langflow langflow desktop's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for langflow langflow desktop vulnerabilities?: No langflow langflow desktop CVEs currently have a tracked public exploit in this dataset.
Which versions of langflow langflow desktop are affected?: 6 distinct langflow langflow desktop versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in langflow langflow desktop CVEs?: langflow langflow desktop's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
What is the average severity of langflow langflow desktop CVEs?: The average CVSS base score across langflow langflow desktop's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track langflow desktop vulnerabilities

Monitor new langflow desktop vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing