Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownLangflow Langflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.59%Oct 12, 2026
- HighLangflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersCheck if you run itEPSS 0.25%Oct 7, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.40%Oct 6, 2026
- UnknownLangflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 23.23%Aug 29, 2026
- UnknownLangflow Langflow Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.19%Aug 9, 2026
- UnknownLangflow '/api/v1/custom_component' Remote Code ExecutionPatch nowKEVEPSS 63.67%Aug 1, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityPatch nowKEVEPSS 28.66%Jul 17, 2026
- UnknownLangflow Langflow Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 41.70%Jun 24, 2026
- High8.4Langflow Authorization Bypass Through User-Controlled Key VulnerabilityPatch nowKEVEPSS 0.89%Jun 23, 2026
- Critical9.6Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.60%May 12, 2026
- Low2.1A weakness has been identified in langflow-ai langflow up to 1.10.2.Check if you run itEPSS 0.31%May 3, 2026
- Low2.1A vulnerability was determined in langflow-ai langflow up to 1.8.4.Check if you run itEPSS 2.60%May 3, 2026
- High8.8IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow.Check if you run itEPSS 0.71%Apr 30, 2026
- High8.1IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete pe…Check if you run itEPSS 0.35%Apr 30, 2026
- Medium6.5IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.56%Apr 30, 2026
- High7.5IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.Check if you run itEPSS 0.41%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system.Check if you run itEPSS 0.41%Apr 30, 2026
- Medium6.4IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.26%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.28%Apr 30, 2026
- Low2.0A flaw has been found in langflow-ai langflow up to 1.8.3.Check if you run itEPSS 0.33%Apr 20, 2026
- Low2.1A vulnerability was detected in langflow-ai langflow up to 1.8.3.Check if you run itEPSS 0.39%Apr 20, 2026
- Low2.1A security vulnerability has been detected in langflow-ai langflow up to 1.8.3.Check if you run itEPSS 0.24%Apr 20, 2026
- Low2.0A weakness has been identified in langflow-ai langflow up to 1.8.3.Check if you run itEPSS 0.38%Apr 20, 2026
- Medium5.5A security flaw has been discovered in langflow-ai langflow up to 1.1.0.Check if you run itEPSS 0.47%Apr 20, 2026
- UnknownLangflow Langflow Missing Authentication for Critical FunctionPatch nowKEVEPSS 33.29%Apr 9, 2026
42 records · page 1 of 2
PreviousNext