Langflow

4 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-0770 Exploited Public exploit EPSS 63%

  Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

  Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to e…

  Langflow Langflow langflow PyPI
  Jan 23, 2026

  KEV Jul 21, 2026
• Critical 9.8
  CVE-2026-0769 Public exploit EPSS 41%

  Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

  Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. T…

  Langflow Langflow
  Jan 23, 2026
• Critical 9.8
  CVE-2026-0768 Public exploit EPSS 28%

  Langflow code Code Injection Remote Code Execution Vulnerability

  Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exist…

  Langflow Langflow
  Jan 23, 2026
• Critical 9.4
  CVE-2025-34291 Exploited Public exploit EPSS 93%

  Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

  Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie c…

  Langflow Langflow langflow PyPI
  Dec 5, 2025

  KEV May 21, 2026