Langflow: exploited vulnerabilities
- 5exploited vulnerabilities
- 1used by ransomware
- Jul 21, 2026latest one added
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jul 21, 2026 | Inclusion of Functionality from Untrusted Control Sphere | Langflow | Critical 9.8 | 63% |
| Jul 7, 2026 | Authorization Bypass Through User-Controlled Key | Langflow | High 8.4 | 0.9% |
| May 21, 2026 | Origin Validation Error | Langflow | Critical 9.4 | 93% |
| Mar 25, 2026 | Code Injection | Langflow | Critical 9.3 | 96% |
| May 5, 2025 | Missing Authentication | Langflow | Critical 9.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.