Skip to content
OpenAdvisories

Vendor

Langflow

6 known vulnerabilities.

Products

Langflow 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-0770 Exploited Public exploit EPSS 63%

    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to e…

    Langflow Langflow langflow PyPI
    KEV Jul 21, 2026
  • Critical 9.4
    CVE-2025-34291 Exploited Public exploit EPSS 93%

    Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

    Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie c…

    Langflow Langflow langflow PyPI
    KEV May 21, 2026