langflow vulnerabilities and fixes

Recent CVEs affecting langflow, with upgrade or downgrade steps. 29 tracked.

langflow has 29 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 29. Most recent: 2026-08-05. Highest priority: CVE-2026-12940 (score 57/100).

• CVE-2026-13442 HIGH 7.1 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access
• CVE-2026-12940 CRITICAL 9.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment
• CVE-2026-12946 CRITICAL 9.9 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, du
• CVE-2026-13435 CRITICAL 9.9 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sa
• CVE-2026-12942 HIGH 7.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system
• CVE-2026-13444 HIGH 8.1 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents
• CVE-2026-10700 MEDIUM 6.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handl
• CVE-2026-12945 HIGH 7.1 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build j
• CVE-2026-17623 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary command
• CVE-2026-17632 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code du
• CVE-2026-17624 HIGH 8.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0
• CVE-2026-17633 HIGH 8.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code du
• CVE-2026-8182 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on
• CVE-2026-8478 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, du
• CVE-2026-8446 HIGH 7.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Prot
• CVE-2026-17626 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expos
• CVE-2026-17630 HIGH 7.2 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper
• CVE-2026-9196 HIGH 8.1 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during
• CVE-2026-8183 HIGH 7.7 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0
• CVE-2026-9201 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a
• CVE-2026-9205 HIGH 7.4 UPGRADE IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() functio
• CVE-2026-7646 MEDIUM 6.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, includi
• CVE-2026-7658 MEDIUM 6.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inj
• CVE-2026-8470 HIGH 7.4 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 us
• CVE-2026-7657 MEDIUM 6.5 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplet
• CVE-2026-9081 HIGH 7.1 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF)
• CVE-2026-9130 HIGH 7.1 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent tha
• CVE-2026-10547 MEDIUM 5.9 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/buil
• CVE-2026-7869 MEDIUM 5.4 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v

FAQ

How do I fix langflow vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is langflow being exploited right now?

None of the tracked langflow CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which langflow CVE should I patch first?

CVE-2026-12940 currently ranks highest (57/100): IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment.

← Back to latest CVEs