Skip to content
OpenAdvisories

Package · PyPI

langflow-base

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-105697 Public exploit

    Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

    Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and (before 1.10.3) wrapped in bash -c…

    langflow-ai langflow langflow-base lfx PyPI
  • Critical 9.8
    CVE-2025-3248 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

    Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

    langflow-ai langflow langflow langflow-base PyPI
    KEV May 5, 2025