Skip to content
Sign in

Langflow product

Several products

Alert
No CISA KEV deadline is open. CISA last added a Several products CVE on 21 Jul.

Tracked since 20 Mar · latest article 16 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 5 in the full CISA catalogue · all time

2High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date5

Several products CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Several products CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-0770Langflow21 JulPassed 24 Jul3
In CISA KEVCVE-2026-55255Langflow7 JulPassed 10 Jul12
In CISA KEVCVE-2025-34291Langflow21 MayPassed 4 Jun3
In CISA KEVCVE-2026-33017Langflow25 MarPassed 8 Apr8
In CISA KEVCVE-2025-3248RansomwareLangflow5 MayPassed 26 May6
Vendor CSV of 5 entries for LangflowAll 5 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Several products CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’251Q2 ’250Q3 ’250Q4 ’251Q1 ’261Q2 ’262Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20251
Q3 20250
Q4 20250
Q1 20261
Q2 20261
Q3 20262
Q4 20260

Fix listed

5 of 12 CVEs in coverage

7 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2025-3248: 100th percentile, in CISA KEVCVE-2026-33017: 99.9th percentile, in CISA KEVCVE-2025-34291: 99.8th percentile, in CISA KEVCVE-2026-0770: 99.2th percentile, in CISA KEVCVE-2026-55255: 59.3th percentile, in CISA KEVCVE-2026-5027: 98.6th percentileCVE-2026-0768: 98.1th percentileCVE-2026-55450: 68th percentileCVE-2026-105740: 64.3th percentileCVE-2026-105697: 61.2th percentileCVE-2026-48519: 56th percentileCVE-2026-55447: 51.7th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2025-3248100
CVE-2026-3301799.9
CVE-2025-3429199.8
CVE-2026-077099.2
CVE-2026-502798.6
CVE-2026-076898.1
CVE-2026-5545068
CVE-2026-10574064.3
CVE-2026-10569761.2
CVE-2026-5525559.3
CVE-2026-4851956
CVE-2026-5544751.7

Coverage41 articles · all time

The latest 41 articles naming Several products, in the shared story grammar.

Full timeline
Quiet for 2 weekslast report 16 Oct41 articles9 outlets

41 articles from 9 outlets since 20 Mar. Quiet since 16 Oct.

Now20 Mar20 May81921326718311123516First reportSecurityWeek · 20 Mar, 08:45CISA alert21 May, 20:11 · official
  • Fri 20 Mar, 08:45 UTC. SecurityWeek, first report. Critical Langflow Vulnerability Exploited Hours After Public Disclosure. Cites a CVE in CISA KEV.
  • Fri 20 Mar, 10:47 UTC. Infosecurity, its first report on the story. Hackers Exploit Critical Langflow Bug in Just 20 Hours. Cites a CVE in CISA KEV.
  • Fri 20 Mar, 16:24 UTC. The Hacker News, its first report on the story. Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure. Cites a CVE in CISA KEV.
  • Thu 26 Mar, 19:48 UTC. Dark Reading, its first report on the story. Critical Flaw in Langflow AI Platform Under Attack. Cites a CVE in CISA KEV.
  • Thu 26 Mar, 22:02 UTC. Security Affairs, its first report on the story. U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Fri 27 Mar, 10:59 UTC. Security Affairs. U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Thu 21 May, 20:11 UTC. CISA, its first report on the story. CISA warns of critical Langflow CVE-2025-34291 flaw under attack. Cites a CVE in CISA KEV.
  • Thu 21 May, 21:19 UTC. CISA. CISA warns of critical Langflow CVE-2025-34291 flaw under attack. Cites a CVE in CISA KEV.
  • Fri 22 May, 10:32 UTC. Security Affairs. CISA Flags CVE-2025-34291 Langflow Flaw in KEV Update. Cites a CVE in CISA KEV.
  • Wed 3 Jun, 01:57 UTC. SecurityOnline, its first report on the story. CVE-2026-48519 exposes Langflow AI to remote code execution.
  • Wed 10 Jun, 16:02 UTC. The Hacker News. Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE.
  • Thu 11 Jun, 12:27 UTC. SecurityWeek. Hackers Exploit Langflow Vulnerability for Remote Code Execution.
  • Fri 19 Jun, 02:21 UTC. SecurityOnline. Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450).
  • Fri 26 Jun, 02:20 UTC. SecurityOnline. Critical flaws in Langflow allow data theft and DoS, patch urged. Cites a CVE in CISA KEV.
  • Sat 27 Jun, 02:46 UTC. SecurityOnline. Langflow CVE-2026-33017 flaw leveraged to deploy cryptominer. Cites a CVE in CISA KEV.
  • Fri 3 Jul, 11:32 UTC. SecurityWeek. Agentic AI Used to Conduct Ransomware Attack via Langflow. Cites a CVE in CISA KEV.
  • Fri 3 Jul, 12:32 UTC. Security Affairs. JADEPUFFER AI ransomware exploits Langflow flaw CVE-2025-3248. Cites a CVE in CISA KEV.
  • Mon 6 Jul, 17:41 UTC. Dark Reading. LLM Driven Ransomware Automates Attack via Langflow CVE-2025-3248. Cites a CVE in CISA KEV.
  • Tue 7 Jul, 18:07 UTC. CISA. CISA adds critical Langflow auth bypass flaw to KEV list. Cites a CVE in CISA KEV.
  • Tue 7 Jul, 22:31 UTC. CISA. CISA adds critical Langflow auth bypass flaw to KEV list. Cites a CVE in CISA KEV.
  • Wed 8 Jul, 03:31 UTC. SecurityOnline. CISA flags critical Joomla, ColdFusion bugs under attack. Cites a CVE in CISA KEV.
  • Wed 8 Jul, 03:31 UTC. SecurityOnline. Four flaws hit Joomla, Langflow, ColdFusion and Linux today. Cites a CVE in CISA KEV.
  • Wed 8 Jul, 09:21 UTC. Security Affairs. CISA warns of active exploits in ColdFusion, Joomla page builders. Cites a CVE in CISA KEV.
  • Wed 8 Jul, 10:01 UTC. SecurityOnline. Android Remote Root Exploit Chain Unveiled by Nebula. Cites a CVE in CISA KEV.
  • Wed 8 Jul, 11:08 UTC. SecurityWeek. CISA alerts on critical ColdFusion Langflow and Joomla flaws. Cites a CVE in CISA KEV.
  • Wed 8 Jul, 17:08 UTC. SecurityOnline. Foxit PDF Reader flaws expose users to arbitrary code execution. Cites a CVE in CISA KEV.
  • Wed 8 Jul, 17:12 UTC. SecurityOnline. Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet. Cites a CVE in CISA KEV.
  • Thu 9 Jul, 05:32 UTC. SecurityOnline. LineageOS Browser Flash Tool Makes ROM Install Easier. Cites a CVE in CISA KEV.
  • Fri 10 Jul, 08:41 UTC. SecurityOnline. JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack. Cites a CVE in CISA KEV.
  • Mon 13 Jul, 03:01 UTC. SecurityOnline. CISA Adds Six KEV Flaws, Including Joomla Extensions and AI Bugs. Cites a CVE in CISA KEV.
  • Tue 21 Jul, 15:33 UTC. CISA. CISA warns of critical Langflow RCE flaw CVE-2026-0770. Cites a CVE in CISA KEV.
  • Tue 21 Jul, 18:11 UTC. SecurityOnline. CISA warns of active exploits in WordPress, Langflow, DDWRT. Cites a CVE in CISA KEV.
  • Wed 22 Jul, 11:40 UTC. Security Affairs. CISA adds DDWRT, Langflow and WordPress bugs to KEV list. Cites a CVE in CISA KEV.
  • Thu 30 Jul, 10:32 UTC. Unit 42, its first report on the story. Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks. Cites a CVE in CISA KEV.
  • Tue 1 Sep, 12:22 UTC. SecurityWeek. Hackers Start Exploiting Critical Langflow Vulnerability.
  • Tue 1 Sep, 21:30 UTC. Dark Reading. Critical Langflow Flaw Exploited as Attacks on AI Platform Rise.
  • Wed 2 Sep, 08:28 UTC. Security Affairs. Hackers Target Langflow in CVE-2026-0768 Attacks.
  • Mon 7 Sep, 04:31 UTC. SecurityOnline. CISA KEV Missed Four Actively Exploited AI and WordPress Flaws. Cites a CVE in CISA KEV.
  • Wed 30 Sep, 15:01 UTC. Google Cloud, its first report on the story. Google Warns N Day Flaws Are Driving a Surge in Exploitation. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 09:26 UTC. The Hacker News. Langflow RCE flaw lets any authenticated user run malicious commands.
  • Fri 16 Oct, 14:25 UTC. SecurityWeek. ICS-Sniper Can Disrupt Cloud-Run Industrial Systems by Timing Packets.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 41 articles as a list
  1. Fri 20 MarDay 03
    1. Critical Langflow Vulnerability Exploited Hours After Public Disclosure08:45 · SecurityWeek · First report · Exploited CVE · Known exploited CVE
    2. Hackers Exploit Critical Langflow Bug in Just 20 Hours10:47 · Infosecurity · Known exploited CVE
    3. Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure16:24 · The Hacker News · Known exploited CVE

  2. Quiet for 6 days

    Thu 26 MarDay 62
    1. Critical Flaw in Langflow AI Platform Under Attack19:48 · Dark Reading · Picked up again · Known exploited CVE
    2. U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog22:02 · Security Affairs · Known exploited CVE
  3. Fri 27 MarDay 71
    1. U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog10:59 · Security Affairs · Known exploited CVE

  4. Quiet for 8 weeks

    Thu 21 MayDay 622
    1. CISA warns of critical Langflow CVE-2025-34291 flaw under attack20:11 · CISA · official · CISA alert · Picked up again · Known exploited CVE
    2. CISA warns of critical Langflow CVE-2025-34291 flaw under attack21:19 · CISA · official · Known exploited CVE
  5. Fri 22 MayDay 631
    1. CISA Flags CVE-2025-34291 Langflow Flaw in KEV Update10:32 · Security Affairs · Known exploited CVE

  6. Quiet for 12 days

    Wed 3 JunDay 751
    1. CVE-2026-48519 exposes Langflow AI to remote code execution01:57 · SecurityOnline · Picked up again

  7. Quiet for 8 days

    Wed 10 JunDay 821
    1. Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE16:02 · The Hacker News · Picked up again
  8. Thu 11 JunDay 831
    1. Hackers Exploit Langflow Vulnerability for Remote Code Execution12:27 · SecurityWeek

  9. Quiet for 8 days

    Fri 19 JunDay 911
    1. Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)02:21 · SecurityOnline · Picked up again

  10. Quiet for 7 days

    Fri 26 JunDay 981
    1. Critical flaws in Langflow allow data theft and DoS, patch urged02:20 · SecurityOnline · Picked up again · Known exploited CVE
  11. Sat 27 JunDay 991
    1. Langflow CVE-2026-33017 flaw leveraged to deploy cryptominer02:46 · SecurityOnline · Known exploited CVE

  12. Quiet for 6 days

    Fri 3 JulDay 1052
    1. Agentic AI Used to Conduct Ransomware Attack via Langflow11:32 · SecurityWeek · Picked up again · Known exploited CVE
    2. JADEPUFFER AI ransomware exploits Langflow flaw CVE-2025-324812:32 · Security Affairs · Known exploited CVE

  13. Quiet for 3 days

    Mon 6 JulDay 1081
    1. LLM Driven Ransomware Automates Attack via Langflow CVE-2025-324817:41 · Dark Reading · Picked up again · Known exploited CVE
  14. Tue 7 JulDay 1092
    1. CISA adds critical Langflow auth bypass flaw to KEV list18:07 · CISA · official · Known exploited CVE
    2. CISA adds critical Langflow auth bypass flaw to KEV list22:31 · CISA · official · Known exploited CVE
  15. Wed 8 JulDay 1107
    1. CISA flags critical Joomla, ColdFusion bugs under attack03:31 · SecurityOnline · Known exploited CVE
    2. Four flaws hit Joomla, Langflow, ColdFusion and Linux today03:31 · SecurityOnline · Known exploited CVE
    3. CISA warns of active exploits in ColdFusion, Joomla page builders09:21 · Security Affairs · Known exploited CVE
    Show 4 more from 8 Jul
    1. Android Remote Root Exploit Chain Unveiled by Nebula10:01 · SecurityOnline · Known exploited CVE
    2. CISA alerts on critical ColdFusion Langflow and Joomla flaws11:08 · SecurityWeek · Known exploited CVE
    3. Foxit PDF Reader flaws expose users to arbitrary code execution17:08 · SecurityOnline · Known exploited CVE
    4. Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet17:12 · SecurityOnline · Known exploited CVE
  16. Thu 9 JulDay 1111
    1. LineageOS Browser Flash Tool Makes ROM Install Easier05:32 · SecurityOnline · Known exploited CVE
  17. Fri 10 JulDay 1121
    1. JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack08:41 · SecurityOnline · Known exploited CVE

  18. Quiet for 3 days

    Mon 13 JulDay 1151
    1. CISA Adds Six KEV Flaws, Including Joomla Extensions and AI Bugs03:01 · SecurityOnline · Picked up again · Known exploited CVE

  19. Quiet for 9 days

    Tue 21 JulDay 1232
    1. CISA warns of critical Langflow RCE flaw CVE-2026-077015:33 · CISA · official · Picked up again · Known exploited CVE
    2. CISA warns of active exploits in WordPress, Langflow, DDWRT18:11 · SecurityOnline · Known exploited CVE
  20. Wed 22 JulDay 1241
    1. CISA adds DDWRT, Langflow and WordPress bugs to KEV list11:40 · Security Affairs · Known exploited CVE

  21. Quiet for 8 days

    Thu 30 JulDay 1321
    1. Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks10:32 · Unit 42 · Picked up again · Known exploited CVE

  22. Quiet for 5 weeks

    Tue 1 SepDay 1652
    1. Hackers Start Exploiting Critical Langflow Vulnerability12:22 · SecurityWeek · Picked up again
    2. Critical Langflow Flaw Exploited as Attacks on AI Platform Rise21:30 · Dark Reading
  23. Wed 2 SepDay 1661
    1. Hackers Target Langflow in CVE-2026-0768 Attacks08:28 · Security Affairs

  24. Quiet for 5 days

    Mon 7 SepDay 1711
    1. CISA KEV Missed Four Actively Exploited AI and WordPress Flaws04:31 · SecurityOnline · Picked up again · Known exploited CVE

  25. Quiet for 3 weeks

    Wed 30 SepDay 1941
    1. Google Warns N Day Flaws Are Driving a Surge in Exploitation15:01 · Google Cloud · Picked up again · Known exploited CVE

  26. Quiet for 2 weeks

    Thu 15 OctDay 2091
    1. Langflow RCE flaw lets any authenticated user run malicious commands09:26 · The Hacker News · Picked up again
  27. Fri 16 OctDay 2101
    1. ICS-Sniper Can Disrupt Cloud-Run Industrial Systems by Timing Packets14:25 · SecurityWeek

All CVEs in coverage12

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2025-3248Exploited

    Langflow Missing Authentication Vulnerability

    9.8Critical99.9% EPSS · 6 articles
  • CVE-2026-33017Exploited

    Langflow Code Injection Vulnerability

    9.3Critical96% EPSS · 8 articles
  • CVE-2025-34291Exploited

    Langflow Origin Validation Error Vulnerability

    9.4Critical93% EPSS · 3 articles
  • CVE-2026-0770Exploited

    Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    9.8Critical63% EPSS · 3 articles
  • CVE-2026-55255Exploited

    Langflow Authorization Bypass Through User-Controlled Key Vulnerability

    8.4High0.9% EPSS · 12 articles
  • CVE-2026-5027

    Langflow - Path Traversal Arbitrary File Write via upload_user_file

    8.8High40% EPSS · 3 articles
  • CVE-2026-0768

    Langflow code Code Injection Remote Code Execution Vulnerability

    9.8Critical28% EPSS · 4 articles
  • CVE-2026-55450

    langflow-ai langflow vulnerability

    9.3Critical1.2% EPSS · 2 articles
  • CVE-2026-105740

    Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

    9.9Critical1.1% EPSS · 2 articles
  • CVE-2026-105697

    Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

    9.9Critical0.9% EPSS · 1 article
  • CVE-2026-48519

    Langflow: Unauthenticated RCE in Shareable Playgrounds

    9.6Critical0.8% EPSS · 1 article
  • CVE-2026-55447

    langflow-ai langflow vulnerability

    9.6Critical0.7% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in