CyberSIXT Search
Vendor

Langflow

CVEs tracked · all time
12
in CISA KEV · all time
5
articles · since 11 Sep
3
articles · all time
41

3 articles since 11 Sep.

Show as table
Langflow: articles per day
Day (UTC)Articles
Wed 30 Sep1
Thu 15 Oct1
Fri 16 Oct1
See the full timeline

Products: Langflow, langflow-base, lfx

CVEs

12 CVEs
CVE-2025-3248Langflow Missing Authentication VulnerabilityCVSS9.8CriticalExploited99.9%EPSS6articles
CVE-2026-33017Langflow Code Injection VulnerabilityCVSS9.3CriticalExploited96%EPSS8articles
CVE-2026-0770Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityCVSS9.8CriticalExploited63%EPSS3articles
CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key VulnerabilityCVSS8.4HighExploited0.9%EPSS12articles
CVE-2025-34291Langflow Origin Validation Error VulnerabilityCVSS9.4CriticalExploited93%EPSS3articles
CVE-2026-105740Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the serverCVSS9.9Critical–Not in KEV1.1%EPSS2articles
CVE-2026-105697Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-5027Langflow - Path Traversal Arbitrary File Write via upload_user_fileCVSS8.8High–Not in KEV4.8%EPSS3articles
CVE-2026-0768Langflow code Code Injection Remote Code Execution VulnerabilityCVSS9.8Critical–Not in KEV28%EPSS4articles
CVE-2026-55447langflow-ai langflow vulnerabilityCVSS9.6Critical–Not in KEV0.7%EPSS1article
CVE-2026-55450langflow-ai langflow vulnerabilityCVSS9.3Critical–Not in KEV1.2%EPSS2articles
CVE-2026-48519Langflow: Unauthenticated RCE in Shareable PlaygroundsCVSS9.6Critical–Not in KEV0.8%EPSS1article

Coverage

41 articles, all timeFull timeline RSS feed
  1. ICS-Sniper Can Disrupt Cloud-Run Industrial Systems by Timing PacketsSecurityWeek
  2. Langflow RCE flaw lets any authenticated user run malicious commandsThe Hacker News
  3. Google Warns N Day Flaws Are Driving a Surge in ExploitationGoogle Cloud
  4. CISA KEV Missed Four Actively Exploited AI and WordPress FlawsSecurityOnline
  5. Hackers Target Langflow in CVE-2026-0768 AttacksSecurity Affairs
  6. Critical Langflow Flaw Exploited as Attacks on AI Platform RiseDark Reading
  7. Hackers Start Exploiting Critical Langflow VulnerabilitySecurityWeek
  8. Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous CyberattacksUnit 42
  9. CISA adds DDWRT, Langflow and WordPress bugs to KEV listSecurity Affairs
  10. CISA warns of active exploits in WordPress, Langflow, DDWRTSecurityOnline
  11. CISA warns of critical Langflow RCE flaw CVE-2026-0770CISA · official notice
  12. CISA Adds Six KEV Flaws, Including Joomla Extensions and AI BugsSecurityOnline
  13. JADEPUFFER Marks the First AI-Driven Agentic Ransomware AttackSecurityOnline
  14. LineageOS Browser Flash Tool Makes ROM Install EasierSecurityOnline
  15. Network UPS Tools RCE Flaw Affects upsmon, With No Patch YetSecurityOnline
  16. Foxit PDF Reader flaws expose users to arbitrary code executionSecurityOnline
  17. CISA alerts on critical ColdFusion Langflow and Joomla flawsSecurityWeek
  18. Android Remote Root Exploit Chain Unveiled by NebulaSecurityOnline
  19. CISA warns of active exploits in ColdFusion, Joomla page buildersSecurity Affairs
  20. Four flaws hit Joomla, Langflow, ColdFusion and Linux todaySecurityOnline
  21. CISA flags critical Joomla, ColdFusion bugs under attackSecurityOnline
  22. CISA adds critical Langflow auth bypass flaw to KEV listCISA · official notice
  23. CISA adds critical Langflow auth bypass flaw to KEV listCISA · official notice
  24. LLM Driven Ransomware Automates Attack via Langflow CVE-2025-3248Dark Reading
  25. JADEPUFFER AI ransomware exploits Langflow flaw CVE-2025-3248Security Affairs
  26. Agentic AI Used to Conduct Ransomware Attack via LangflowSecurityWeek
  27. Langflow CVE-2026-33017 flaw leveraged to deploy cryptominerSecurityOnline
  28. Critical flaws in Langflow allow data theft and DoS, patch urgedSecurityOnline
  29. Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)SecurityOnline
  30. Hackers Exploit Langflow Vulnerability for Remote Code ExecutionSecurityWeek
  31. Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCEThe Hacker News
  32. CVE-2026-48519 exposes Langflow AI to remote code executionSecurityOnline
  33. CISA Flags CVE-2025-34291 Langflow Flaw in KEV UpdateSecurity Affairs
  34. CISA warns of critical Langflow CVE-2025-34291 flaw under attackCISA · official notice
  35. CISA warns of critical Langflow CVE-2025-34291 flaw under attackCISA · official notice
  36. U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs
  37. U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs
  38. Critical Flaw in Langflow AI Platform Under AttackDark Reading
  39. Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of DisclosureThe Hacker News
  40. Hackers Exploit Critical Langflow Bug in Just 20 HoursInfosecurity
  41. Critical Langflow Vulnerability Exploited Hours After Public DisclosureSecurityWeek · first in our coverage

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device