PatchTheCVElangflow desktop vulnerabilities and fixes
Recent CVEs affecting langflow desktop, with upgrade or downgrade steps. 7 tracked.
Also searched as: langflowdesktop.
langflow desktop has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-06-11. Highest priority: CVE-2026-6543 (score 41/100).
- CVE-2026-6543 HIGH 8.8 UPGRADE IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the pr
- CVE-2026-3340 MEDIUM 6.5 UPGRADE IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF)
- CVE-2026-4503 HIGH 7.5 UPGRADE IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' ima
- CVE-2026-3345 MEDIUM 6.5 UPGRADE IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system
- CVE-2026-4502 MEDIUM 6.5 UPGRADE IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directorie
- CVE-2026-3346 MEDIUM 6.4 UPGRADE IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting
- CVE-2026-3341 MEDIUM 5.4 UPGRADE IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF)
FAQ
How do I fix langflow desktop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is langflow desktop being exploited right now?
None of the tracked langflow desktop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which langflow desktop CVE should I patch first?
CVE-2026-6543 currently ranks highest (41/100): IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the pr.