Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting whic…Vuln · CVE-2026-3357 · langflow · langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowEPSS 0.7%Apr 8, 2026
High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-34046 · langflow · langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowEPSS 0.7%Mar 27, 2026
Critical9.3Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-33873 · langflow · langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowEPSS 1.8%Mar 27, 2026
High8.8Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Vuln · CVE-2026-5027 · Langflow · Langflow · CVE.org · NIST NVD · VulnCheck KEV · LangflowKEVMar 27, 2026
High7.0The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content.Vuln · CVE-2026-5026 · langflow · langflow · CVE.org · NIST NVD · LangflowMar 27, 2026
Medium6.5The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer.Vuln · CVE-2026-5025 · langflow · langflow · CVE.org · NIST NVD · LangflowMar 27, 2026
Medium6.3The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download im…Vuln · CVE-2026-5022 · langflow · langflow · CVE.org · NIST NVD · LangflowMar 27, 2026
High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-33497 · Langflow · Langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowKEVEPSS 2.0%Mar 24, 2026
High7.5Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-33484 · langflow · langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowEPSS 0.6%Mar 24, 2026
Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-33475 · langflow · langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowEPSS 2.1%Mar 24, 2026
Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-33309 · langflow · langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowEPSS 1.0%Mar 24, 2026
Medium6.1Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-33053 · langflow · langflow · CVE.org · FIRST EPSS · NIST NVD · LangflowEPSS 0.5%Mar 20, 2026
Critical9.3Langflow Code Injection VulnerabilityVuln · CVE-2026-33017 · Langflow · Langflow · CISA KEV · CVE.org · FIRST EPSS · LangflowKEVEPSS 24.8%Mar 19, 2026
Critical9.8Langflow is a tool for building and deploying AI-powered agents and workflows.Vuln · CVE-2026-27966 · langflow · langflow · CVE.org · Metasploit Modules · NIST NVD · LangflowFeb 26, 2026
Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityVuln · CVE-2026-0770 · Langflow · Langflow · CISA KEV · CVE.org · FIRST EPSS · LangflowKEVEPSS 63.0%Jan 22, 2026
Critical9.4Langflow Origin Validation Error VulnerabilityVuln · CVE-2025-34291 · Langflow · Langflow · CISA KEV · CVE.org · FIRST EPSS · LangflowKEVEPSS 92.8%Dec 5, 2025
Critical9.8Langflow Missing Authentication VulnerabilityVuln · CVE-2025-3248 · Langflow · Langflow · CISA KEV · CVE.org · FIRST EPSS · LangflowKEVEPSS 100.0%Apr 7, 2025