Skip to content
Sign in

IBM product

Langflow OSS

Alert
No Langflow OSS CVE is in the CISA KEV catalogue.

Tracked since 28 May · latest article 6 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

1High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No Langflow OSS CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Langflow OSS CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Langflow OSS CVE to KEV.

Fix listed

11 of 11 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-93674: 96.8th percentileCVE-2026-10134: 83.4th percentileCVE-2026-10561: 57.2th percentileCVE-2026-7524: 56.1th percentileCVE-2026-104334: 53.6th percentileCVE-2026-7871: 52.9th percentileCVE-2026-7803: 50.8th percentileCVE-2026-93675: 49.9th percentileCVE-2026-7664: 42.7th percentileCVE-2026-17628: 38.2th percentileCVE-2026-12944: 32.6th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-9367496.8
CVE-2026-1013483.4
CVE-2026-1056157.2
CVE-2026-752456.1
CVE-2026-10433453.6
CVE-2026-787152.9
CVE-2026-780350.8
CVE-2026-9367549.9
CVE-2026-766442.7
CVE-2026-1762838.2
CVE-2026-1294432.6

Coverage6 articles · all time

The latest 6 articles naming Langflow OSS, in the shared story grammar.

Full timeline
Quiet for 4 weekslast report 6 Oct6 articles1 outlet

6 articles from 1 outlet since 28 May. Quiet since 6 Oct.

Now28 May1218252715 Sep25271319First reportSecurityOnline · 28 May, 14:50Exploited CVESecurityOnline · 6 Jul
  • Thu 28 May, 14:50 UTC. SecurityOnline, first report. IBM warns of critical CVE-2026-7524 flaw in Langflow AI framework.
  • Thu 25 Jun, 02:20 UTC. SecurityOnline. Critical IBM Langflow flaws let attackers run code remotely.
  • Sat 4 Jul, 03:11 UTC. SecurityOnline. IBM Flags Critical Langflow Bugs Allowing Remote Code Execution.
  • Mon 6 Jul, 02:32 UTC. SecurityOnline. Weekly Threat Intelligence: The July 2026 Breaches. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 02:00 UTC. SecurityOnline. Critical Langflow Flaw Lets Authenticated Users Run Code as Root.
  • Tue 6 Oct, 02:00 UTC. SecurityOnline. IBM Patches Critical Langflow Flaws That Enable Unauthenticated RCE.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 6 articles as a list
  1. Thu 28 MayDay 01
    1. IBM warns of critical CVE-2026-7524 flaw in Langflow AI framework14:50 · SecurityOnline · First report

  2. Quiet for 4 weeks

    Thu 25 JunDay 281
    1. Critical IBM Langflow flaws let attackers run code remotely02:20 · SecurityOnline · Picked up again

  3. Quiet for 9 days

    Sat 4 JulDay 371
    1. IBM Flags Critical Langflow Bugs Allowing Remote Code Execution03:11 · SecurityOnline · Picked up again

  4. Quiet for 2 days

    Mon 6 JulDay 391
    1. Weekly Threat Intelligence: The July 2026 Breaches02:32 · SecurityOnline · Exploited CVE · Known exploited CVE

  5. Quiet for 10 weeks

    Wed 16 SepDay 1111
    1. Critical Langflow Flaw Lets Authenticated Users Run Code as Root02:00 · SecurityOnline · Picked up again

  6. Quiet for 3 weeks

    Tue 6 OctDay 1311
    1. IBM Patches Critical Langflow Flaws That Enable Unauthenticated RCE02:00 · SecurityOnline · Picked up again

All CVEs in coverage11

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-93674

    Langflow OSS is affected by multiple vulnerabilities

    9.8Critical15% EPSS · 1 article
  • CVE-2026-10134

    IBM Langflow OSS vulnerability

    10.0Critical2.3% EPSS · 2 articles
  • CVE-2026-10561

    IBM Langflow OSS vulnerability

    10.0Critical0.8% EPSS · 1 article
  • CVE-2026-7524

    IBM Langflow OSS vulnerability

    9.8Critical0.8% EPSS · 1 article
  • CVE-2026-104334

    Langflow OSS is affected by multiple vulnerabilities

    9.8Critical0.7% EPSS · 1 article
  • CVE-2026-7871

    IBM Langflow OSS vulnerability

    9.8Critical0.7% EPSS · 1 article
  • CVE-2026-7803

    IBM Langflow OSS vulnerability

    9.8Critical0.6% EPSS · 1 article
  • CVE-2026-93675

    Langflow OSS is affected by multiple vulnerabilities

    8.8High0.6% EPSS · 1 article
  • CVE-2026-7664

    IBM Langflow OSS vulnerability

    9.8Critical0.5% EPSS · 1 article
  • CVE-2026-17628

    IBM Langflow OSS vulnerability

    5.4Medium0.4% EPSS · 1 article
  • CVE-2026-12944

    IBM Langflow OSS vulnerability

    9.6Critical0.4% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in