Langflow known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 5 Langflow vulnerabilities: 4 added in the last 365 days, 4 rated critical (CVSS 9 or higher), and 1 with known ransomware use. The most recent was added Jul 21, 2026.
RSS feed for Langflow exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-07-21 | CVE-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 9.8 (v3.0) | 62.6% | 2026-07-24 | Unknown |
| 2026-07-07 | CVE-2026-55255 | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 8.4 (v3.1) | 0.9% | 2026-07-10 | Unknown |
| 2026-05-21 | CVE-2025-34291 | Langflow Origin Validation Error Vulnerability | 9.4 (v4.0) | 92.8% | 2026-06-04 | Unknown |
| 2026-03-25 | CVE-2026-33017 | Langflow Code Injection Vulnerability | 9.3 (v4.0) | 96.2% | 2026-04-08 | Unknown |
| 2025-05-05 | CVE-2025-3248 | Langflow Missing Authentication Vulnerability | 9.8 (v3.1) | >99.9% | 2025-05-26 | Known |