Skip to content
OpenAdvisories

Product · langflow-ai

langflow

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-33017 Exploited Public exploit Scanner template EPSS 96%

    Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

    Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data paramete…

    langflow-ai langflow langflow PyPI
    KEV Mar 25, 2026
  • Critical 9.8
    CVE-2025-3248 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

    Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

    langflow-ai langflow langflow langflow-base PyPI
    KEV May 5, 2025