Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownLangflow Langflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 0.6%Oct 12, 2026
- HighLangflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersEPSS 0.2%Oct 7, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')KEVEPSS 0.4%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')KEVEPSS 23.2%Aug 29, 2026
- UnknownLangflow Langflow Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 1.2%Aug 9, 2026
- UnknownLangflow '/api/v1/custom_component' Remote Code ExecutionKEVEPSS 63.7%Aug 1, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityKEVEPSS 28.7%Jul 17, 2026
- UnknownLangflow Langflow Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')KEVEPSS 41.7%Jun 24, 2026
- High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityKEVEPSS 0.9%Jun 23, 2026
- Critical9.6Langflow is a tool for building and deploying AI-powered agents and workflows.EPSS 0.6%May 12, 2026
- Low2.1A weakness has been identified in langflow-ai langflow up to 1.10.2.EPSS 0.3%May 3, 2026
- Low2.1A vulnerability was determined in langflow-ai langflow up to 1.8.4.EPSS 2.6%May 3, 2026
- High8.8IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow.EPSS 0.7%Apr 30, 2026
- High8.1IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete pe…EPSS 0.4%Apr 30, 2026
- Medium6.5IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system.EPSS 0.6%Apr 30, 2026
- High7.5IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.EPSS 0.4%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system.EPSS 0.4%Apr 30, 2026
- Medium6.4IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting.EPSS 0.3%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF).EPSS 0.3%Apr 30, 2026
- Low2.0A flaw has been found in langflow-ai langflow up to 1.8.3.EPSS 0.3%Apr 20, 2026
- Low2.1A vulnerability was detected in langflow-ai langflow up to 1.8.3.EPSS 0.4%Apr 20, 2026
- Low2.1A security vulnerability has been detected in langflow-ai langflow up to 1.8.3.EPSS 0.2%Apr 20, 2026
- Low2.0A weakness has been identified in langflow-ai langflow up to 1.8.3.EPSS 0.4%Apr 20, 2026
- Medium5.5A security flaw has been discovered in langflow-ai langflow up to 1.1.0.EPSS 0.5%Apr 20, 2026
- UnknownLangflow Langflow Missing Authentication for Critical FunctionKEVEPSS 33.3%Apr 9, 2026
42 records · page 1 of 2
PreviousNext